GO-2023-2334 vulnerabilities

Vulnerabilities for packages: gitsign, oauth2-proxy, cloudflared, tekton-chains, flux-kustomize-controller, tkn, slsa-verifier, flux-source-controller, argo-workflows, sops, vexctl, terragrunt, cosign, dex, kubescape, fulcio, spire-server, rekor, aactl, kots...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tflint, k3s, gitlab-kas, kubernetes-dashboard, kyverno, caddy, docker-cli-buildx, podman, openbao, cluster-api-azure-controller, crossplane-provider-aws-ec2, rancher-machine, buildkitd, trivy, k9s, snyk-cli, kaf, nfpm, crossplane-provider-aws-rds, sealed-secrets,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tflint, gitsign, neuvector-sigstore-interface, tekton-chains, docker-cli-buildx, witness, falcoctl, tkn, flux-source-controller, kyverno-notation-aws, vexctl, teleport, gh, cosign, sigstore-scaffolding, zarf, skaffold, kubescape, zot, spire-server, ratify, aactl,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, teleport, goreleaser, tkn, witness, gitsign, flux-source-controller, kyverno-notation-aws, zot, policy-controller, ratify...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tflint, gitsign, neuvector-sigstore-interface, kyverno, tekton-chains, docker-cli-buildx, witness, falcoctl, tkn, slsa-verifier, crossplane, buildkitd, trivy, flux-source-controller, kyverno-notation-aws, vexctl, teleport, gh, trivy-operator, cosign,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tflint, gitsign, neuvector-sigstore-interface, tekton-chains, witness, falcoctl, tkn, slsa-verifier, buildkitd, trivy, flux-source-controller, kyverno-notation-aws, vexctl, teleport, gh, trivy-operator, cosign, sigstore-scaffolding, zarf, skaffold, kubescape, zot,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tflint, k3s, cloud-sql-proxy, kubernetes-dashboard, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, caddy, aws-privateca-issuer, pluto, docker-cli-buildx, cluster-api-azure-controller, ip-masq-agent, buildkitd, trivy, wire-go, kubecolor,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: timestamp-authority, k3s, gitsign, neuvector-sigstore-interface, rabbitmq-messaging-topology-operator, tekton-chains, pulumi-kubernetes-operator, src-fingerprint, flux-helm-controller, opentelemetry-collector-contrib, kargo, falcoctl, flux-kustomize-controller,...

CLEANSTART-2026-CH38128 Security fixes in tkn-fips 0.43.0-r1

Package tkn-fips version 0.43.0-r1 fixes 2 vulnerabilities: ghsa-4qg8-fj49-pxjh, ghsa-f83f-xpx7-ffpw...

CLEANSTART-2026-HN32363 Security fixes in tkn-fips 0.43.0-r0

Package tkn-fips version 0.43.0-r0 fixes 1 vulnerabilities: CVE-2025-61729...

PT-2026-85842

Package tkn-fips version 0.43.0-r1 fixes 2 vulnerabilities: ghsa-4qg8-fj49-pxjh, ghsa-f83f-xpx7-ffpw...

CLEANSTART-2026-VX21477 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DU60388 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63760

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63678

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: docker-fips, tkn-fips, zarf, cloudbeat-fips, neuvector-sigstore-interface-fips, crossplane, kyverno, kyverno-fips, cloudbeat, crossplane-fips, trivy, tbot, teleport, tflint, spire-server-fips, teleport-operator-fips, commercial-kyverno, image-factory, gitsign,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tflint, k3s, gitlab-kas, kubernetes-dashboard, kyverno, caddy, docker-cli-buildx, podman, openbao, cluster-api-azure-controller, rancher-machine, buildkitd, trivy, k9s, snyk-cli, kaf, nfpm, flux-notification-controller, glab, rancher, step, apko, guac, chezmoi,...

CLEANSTART-2026-EL22377 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JV06428 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-networkmanager, crossplane-provider-aws-cloudformation-fips, prometheus-mongodb-exporter, tkn-fips, go-slim, act, crossplane-provider-aws-elasticsearch-fips, crossplane-provider-aws-redshiftserverless, terraform-provider-grafana-fips,...