GO-2026-5199 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, vault, vault-fips, splunk-otel-collector...

GO-2026-5487 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, vault, vault-fips, splunk-otel-collector...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: grafana, kine, consul, datadog-agent, frankenphp-8.3, frankenphp-8.2, fuse-overlayfs-snapshotter, beats-fips, rke2-runtime, vault-fips, frankenphp-8.4, mattermost-fips, vault, commercial-expanso-edge, rke2-runtime-fips, zot, loki, beats, elastic-agent, consul-fips,...

GO-2026-5004 vulnerabilities

Vulnerabilities for packages: dapr, kubeflow-pipelines, cerbos, cloudnative-pg-fips, ldap2pg, jitsucom-bulker, gotrue, authentik-fips, gitness, grafana-alloy, spire-server, authentik, temporal-server, azure-service-operator-fips, vault, kube-bench, seaweedfs-fips, goose-fips, teleport, steampipe,...

CLEANSTART-2026-FB10521 Security fixes in vault-fips 1.21.2-r1

Package vault-fips version 1.21.2-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, jaeger-fips, dapr, knative-eventing-fips, etcd-fips, cerbos, cluster-api-fips, frankenphp-8.3, snyk-cli, fuse-overlayfs-snapshotter, gatekeeper-fips, scorecard, buildah-fips, azurefile-csi-fips, authentik-fips, cilium-envoy-fips, eks-distro,...

CVE-2026-3605 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, vault, vault-fips, splunk-otel-collector...

GHSA-M2W4-8GGF-RJ47 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, vault, vault-fips, splunk-otel-collector...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, act, knative-eventing-fips, go-discover, apply-cve-bump, etcd-fips, amazon-ssm-agent-fips, terragrunt-fips, flux-kustomize-controller, frankenphp-8.3, kargo, snyk-cli, rancher-agent, gitlab-runner-fips, gatekeeper-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, act, knative-eventing-fips, go-discover, apply-cve-bump, etcd-fips, amazon-ssm-agent-fips, terragrunt-fips, flux-kustomize-controller, frankenphp-8.3, kargo, snyk-cli, rancher-agent, gitlab-runner-fips, gatekeeper-fips,...

CLEANSTART-2026-GX87608 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-33186, ghsa-j88v-2chj-qfwx, ghsa-pjcq-xvwq-hhpj applied in versions: 1.21.2-r0, 1.21.2-r1, 2.0.0-r0

Multiple security vulnerabilities affect the vault-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: dapr, kubeflow-pipelines, cerbos, cloudnative-pg-fips, ldap2pg, jitsucom-bulker, gotrue, authentik-fips, gitness, grafana-alloy, spire-server, authentik, temporal-server, azure-service-operator-fips, vault, kube-bench, seaweedfs-fips, goose-fips, teleport, steampipe,...

CLEANSTART-2026-VL19675 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.21.2-r0, 1.21.2-r1

Multiple security vulnerabilities affect the vault-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: q, pulumi-language-dotnet, terragrunt-fips, amazon-ssm-agent-fips, cerbos, cluster-api-fips, flux-kustomize-controller, kyverno-notation-aws, snyk-cli, gitlab-runner-fips, terraform-provider-databricks-fips, boring-registry-fips, crossplane-provider-aws-efs-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: q, pulumi-language-dotnet, terragrunt-fips, amazon-ssm-agent-fips, cerbos, cluster-api-fips, flux-kustomize-controller, kyverno-notation-aws, snyk-cli, gitlab-runner-fips, terraform-provider-databricks-fips, boring-registry-fips, crossplane-provider-aws-efs-fips,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: terragrunt-fips, kubeflow-pipelines, cerbos, flux-kustomize-controller, nri-mysql, jitsucom-bulker, step-kms-plugin-fips, witness, timestamp-authority, grafana-alloy, spire-server, temporal-server, vault, db-operator, apko-fips, percona-xtradb-cluster-operator,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: bento, rancher-machine, tekton-pipelines-fips, gitlab-rails-ce, docker-credential-gcr-fips, cluster-api-fips, harbor-scanner-trivy-fips, rancher-agent, helm-set-status, lazydocker, traefik, redpanda, opentelemetry-operator-fips, harbor, opentelemetry-operator,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: bento, rancher-machine, tekton-pipelines-fips, gitlab-rails-ce, docker-credential-gcr-fips, cluster-api-fips, harbor-scanner-trivy-fips, rancher-agent, helm-set-status, lazydocker, traefik, redpanda, opentelemetry-operator-fips, harbor, opentelemetry-operator,...

GHSA-WPFP-CM49-9M9Q vulnerabilities

Vulnerabilities for packages: vault, opentofu-fips, terraform, opentofu...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: containerd-fips, openbao-k8s, prometheus-blackbox-exporter-fips, etcd-fips, snyk-cli, kargo, jitsucom-bulker, scorecard, dex-k8s-authenticator, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, temporal-server, kube-bench, zot,...