GO-2026-5199 vulnerabilities

Vulnerabilities for packages: vault, splunk-otel-collector-fips, vault-fips, splunk-otel-collector...

GO-2026-5487 vulnerabilities

Vulnerabilities for packages: vault, splunk-otel-collector-fips, vault-fips, splunk-otel-collector...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: containerd, elastic-agent-fips, mattermost-fips, vault, consul, mattermost, zot, datadog-agent, grafana, elastic-agent, datadog-agent-fips, rke2-runtime-fips, grafana-fips, kine, commercial-expanso-edge, fuse-overlayfs-snapshotter, frankenphp-8.3, beats, beats-fips,...

GO-2026-5004 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, step, openbao, temporal-server, spqr, openbao-fips, seaweedfs, keda-fips, openfga-fips, jitsucom-bulker, dapr, gitlab-cng, trillian, wal-g, pgwatch, ory-kratos, step-fips, caddy, ldap2pg, sqlexporter-fips, sftpgo, kube-bench,...

CLEANSTART-2026-FB10521 Security fixes in vault-fips 1.21.2-r1

Package vault-fips version 1.21.2-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: timestamp-authority-fips, keda-fips, argo-cd-fips, dapr, langfuse-fips, apko-fips, timestamp-authority, chainloop-cli, gatekeeper-fips, reports-server, jaeger-fips, rclone-fips, commercial-spilo, terraform-fips, knative-net-istio-fips, vexctl, kubernetes-dashboard,...

GHSA-M2W4-8GGF-RJ47 vulnerabilities

Vulnerabilities for packages: vault, splunk-otel-collector-fips, vault-fips, splunk-otel-collector...

CVE-2026-3605 vulnerabilities

Vulnerabilities for packages: vault, splunk-otel-collector-fips, vault-fips, splunk-otel-collector...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-operationsmanagement, step, chisel, openbao, terragrunt, keda-fips, argo-events, apply-cve-bump, argo-cd-fips, crossplane-aws-provider-fips, kubescape-server, mapotf, tekton-pipelines, witness, apko-fips, fscrypt, cosign-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-operationsmanagement, step, chisel, openbao, terragrunt, keda-fips, argo-events, apply-cve-bump, argo-cd-fips, crossplane-aws-provider-fips, kubescape-server, mapotf, tekton-pipelines, witness, apko-fips, fscrypt, cosign-fips,...

CLEANSTART-2026-GX87608 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-33186, ghsa-j88v-2chj-qfwx, ghsa-pjcq-xvwq-hhpj applied in versions: 1.21.2-r0, 1.21.2-r1, 2.0.0-r0

Multiple security vulnerabilities affect the vault-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, step, openbao, temporal-server, spqr, openbao-fips, seaweedfs, keda-fips, openfga-fips, jitsucom-bulker, dapr, gitlab-cng, trillian, wal-g, pgwatch, ory-kratos, step-fips, caddy, ldap2pg, sqlexporter-fips, sftpgo, kube-bench,...

CLEANSTART-2026-VL19675 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.21.2-r0, 1.21.2-r1

Multiple security vulnerabilities affect the vault-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: openbao, terragrunt, openbao-fips, argo-events, argo-cd-fips, q, kyverno-notation-aws, crossplane-provider-aws-firehose, kubescape-server, crossplane-provider-aws-iam-fips, gitsign, tekton-pipelines, apko-fips, gitlab-operator-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: openbao, terragrunt, openbao-fips, argo-events, argo-cd-fips, q, kyverno-notation-aws, crossplane-provider-aws-firehose, kubescape-server, crossplane-provider-aws-iam-fips, gitsign, tekton-pipelines, apko-fips, gitlab-operator-fips,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, step, openbao, temporal-server, terragrunt, seaweedfs, timestamp-authority-fips, keda-fips, openfga-fips, jitsucom-bulker, gitsign, apko-fips, timestamp-authority, trillian, reports-server, sops, crossplane-provider-sql-fips, dex, ory-kratos...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, openbao, openbao-fips, neuvector-scanner-fips, vault, cluster-api-fips, harbor-fips, harbor-scanner-trivy-fips, lazydocker, undock, gatekeeper, kubeflow-katib, amazon-cloudwatch-agent-operator, portieris-fips, harbor, aactl,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, openbao, openbao-fips, neuvector-scanner-fips, vault, cluster-api-fips, harbor-fips, harbor-scanner-trivy-fips, lazydocker, undock, gatekeeper, kubeflow-katib, amazon-cloudwatch-agent-operator, portieris-fips, harbor, aactl,...

GHSA-WPFP-CM49-9M9Q vulnerabilities

Vulnerabilities for packages: opentofu-fips, vault, terraform, opentofu...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, temporal-server, openbao, google-guest-agent, openbao-fips, filebrowser, argo-events, azcopy, crossplane-provider-aws, kyverno-notation-aws, postgres-operator, kserve-modelmesh-serving, cosign-fips, terraform-provider-tls-fips,...