CLEANSTART-2026-VX21477 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DU60388 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: aactl, teleport, kyverno-fips, trivy-fips, spire-server-fips, trivy-operator-fips, policy-controller, falcoctl, ratify-fips, kyverno, policy-controller-fips, gitsign, kyverno-notation-aws-fips, neuvector-sigstore-interface, teleport-operator-fips, tekton-chains-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: policy-controller, glab, buildkitd, docker-cli-buildx, gomplate, gitlab-runner, ko, step-kms-plugin, crossplane-provider-azure-storage, fscrypt, kubernetes-dashboard, k3s, vault-benchmark, pulumi, flux-notification-controller, terragrunt, teleport, osv-scanner, istio...

CLEANSTART-2026-EL22377 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JV06428 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, external-secrets-operator, k8ssandra-client, crossplane-provider-aws-lambda-fips, crossplane-provider-aws-secretsmanager-fips, keda-fips, nvidia-nsight-compute-13.2, crossplane-provider-aws-cognitoidentity-fips,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, external-secrets-operator, k8ssandra-client, crossplane-provider-aws-lambda-fips, crossplane-provider-aws-secretsmanager-fips, keda-fips, nvidia-nsight-compute-13.2, crossplane-provider-aws-cognitoidentity-fips,...

CVE-2026-39819 vulnerabilities

Vulnerabilities for packages: nri-apache, buildkitd, conjur-cli, grafana-operator, cni-plugins, pgtimetable, dive, ko, kubeflow, addon-resizer, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark,...

GHSA-3V2C-X6Q9-F697 vulnerabilities

Vulnerabilities for packages: buildkitd, ko, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark, cert-manager-csi-driver, lazydocker, teleport, istio, kubernetes, gatekeeper, goreleaser, coredns,...

CVE-2026-39826 vulnerabilities

Vulnerabilities for packages: buildkitd, ko, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark, cert-manager-csi-driver, lazydocker, teleport, istio, kubernetes, gatekeeper, goreleaser, coredns,...

GHSA-497X-JCXF-M478 vulnerabilities

Vulnerabilities for packages: buildkitd, conjur-cli, ko, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark, cert-manager-csi-driver, teleport, istio, nats, kubernetes, sonobuoy, gatekeeper, goreleaser,...

CVE-2026-33811 vulnerabilities

Vulnerabilities for packages: buildkitd, conjur-cli, ko, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark, cert-manager-csi-driver, teleport, istio, nats, kubernetes, sonobuoy, gatekeeper, goreleaser,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: nri-apache, buildkitd, conjur-cli, grafana-operator, cni-plugins, pgtimetable, dive, ko, kubeflow, addon-resizer, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: nri-apache, buildkitd, conjur-cli, grafana-operator, cni-plugins, pgtimetable, dive, ko, kubeflow, addon-resizer, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark,...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: buildkitd, ko, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark, cert-manager-csi-driver, lazydocker, teleport, istio, kubernetes, gatekeeper, goreleaser, coredns,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: nri-apache, buildkitd, conjur-cli, grafana-operator, pgtimetable, dive, ko, kubeflow, addon-resizer, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark, cert-manager-csi-driver,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: nri-apache, buildkitd, conjur-cli, grafana-operator, cni-plugins, pgtimetable, dive, ko, kubeflow, addon-resizer, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: nri-apache, buildkitd, conjur-cli, grafana-operator, cni-plugins, pgtimetable, dive, ko, kubeflow, addon-resizer, fluent-bit-plugin-loki, kube-arangodb, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, k3s, vault-benchmark,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: grafana-operator, pgtimetable, ko, fluent-bit-plugin-loki, kubernetes-dashboard, azure-service-operator, k3s, teleport, istio, nats, kubernetes, gatekeeper, goreleaser, coredns, runc, cluster-autoscaler, prometheus-operator, kpt, trino, nerdctl, skopeo,...