GO-2026-5199 vulnerabilities

Vulnerabilities for packages: vault, vault-fips, splunk-otel-collector-fips, splunk-otel-collector...

GO-2026-5487 vulnerabilities

Vulnerabilities for packages: vault, vault-fips, splunk-otel-collector-fips, splunk-otel-collector...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, grafana-fips, rke2-runtime, commercial-expanso-edge, rke2-runtime-fips, fuse-overlayfs-snapshotter, mattermost, consul, datadog-agent, beats, frankenphp-8.4, datadog-agent-fips, frankenphp-8.5, mattermost-fips, grafana, beats-fips, zot, containerd...

GO-2026-5004 vulnerabilities

Vulnerabilities for packages: caddy, flyte, goose, seaweedfs, openbao, step-issuer, sftpgo-plugin-eventsearch, keda, kube-bench, cloudnative-pg, sqlexporter, trillian-fips, openfga-fips, certificate-transparency, sftpgo, pgwatch, sqlexporter-fips, argo-workflows, timescaledb-parallel-copy,...

CLEANSTART-2026-FB10521 Security fixes in vault-fips 1.21.2-r1

Package vault-fips version 1.21.2-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: buildkitd, caddy, hubble, gitlab-workhorse-ce, helm, prometheus-operator-fips, helmfile, kubeflow-katib, kubernetes-fips, backup-restore-operator, knative-net-istio-fips, azuredisk-csi, mattermost, apm-server, timestamp-authority, podman-fips, cluster-autoscaler,...

GHSA-M2W4-8GGF-RJ47 vulnerabilities

Vulnerabilities for packages: vault, vault-fips, splunk-otel-collector-fips, splunk-otel-collector...

CVE-2026-3605 vulnerabilities

Vulnerabilities for packages: vault, vault-fips, splunk-otel-collector-fips, splunk-otel-collector...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, buildkitd, caddy, nfpm, guac, argocd-image-updater, gitlab-workhorse-ce, rootlesskit-fips, helm, crossplane-provider-azure-resources, helmfile, kubernetes-fips, kubevela-fips, argo-events, openbao, backup-restore-operator,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, buildkitd, caddy, nfpm, guac, argocd-image-updater, gitlab-workhorse-ce, rootlesskit-fips, helm, crossplane-provider-azure-resources, helmfile, kubernetes-fips, kubevela-fips, argo-events, openbao, backup-restore-operator,...

CLEANSTART-2026-GX87608 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-33186, ghsa-j88v-2chj-qfwx, ghsa-pjcq-xvwq-hhpj applied in versions: 1.21.2-r0, 1.21.2-r1, 2.0.0-r0

Multiple security vulnerabilities affect the vault-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: caddy, flyte, goose, seaweedfs, openbao, step-issuer, sftpgo-plugin-eventsearch, keda, kube-bench, cloudnative-pg, sqlexporter, trillian-fips, openfga-fips, certificate-transparency, sftpgo, pgwatch, sqlexporter-fips, argo-workflows, timescaledb-parallel-copy,...

CLEANSTART-2026-VL19675 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.21.2-r0, 1.21.2-r1

Multiple security vulnerabilities affect the vault-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: buildkitd, nfpm, crossplane-provider-aws-rds, databricks-cli, kubevela, ratify-fips, flux-helm-controller, guac, argocd-image-updater, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-firehose, helm, goreleaser, terraform-provider-azuread-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: buildkitd, nfpm, crossplane-provider-aws-rds, databricks-cli, kubevela, ratify-fips, flux-helm-controller, guac, argocd-image-updater, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-firehose, helm, goreleaser, terraform-provider-azuread-fips,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: caddy, ratify-fips, nri-mysql, seaweedfs, openbao, step-issuer, crossplane-provider-sql, age-fips, flux-kustomize-controller-fips, witness, mattermost, timestamp-authority, tkn-fips, keda, beats, sqlexporter, mattermost-fips, sops, trillian-fips, openfga-fips,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, bento, ctop, harvester, promxy, traefik-fips, harbor-scanner-trivy, kubevirt-cdi-uploadserver, kpt, cluster-api-helm-controller, rke2-runtime, falcoctl, amazon-ecs-agent, kubeflow-katib, crossplane, amazon-ecs-agent-fips, rancher-agent, openba...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, bento, ctop, harvester, promxy, traefik-fips, harbor-scanner-trivy, kubevirt-cdi-uploadserver, kpt, cluster-api-helm-controller, rke2-runtime, falcoctl, amazon-ecs-agent, kubeflow-katib, crossplane, amazon-ecs-agent-fips, rancher-agent, openba...

GHSA-WPFP-CM49-9M9Q vulnerabilities

Vulnerabilities for packages: vault, terraform, opentofu-fips, opentofu...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, promxy, flux-helm-controller, grafana-agent-operator, crossplane-provider-aws-firehose, kube-logging-logging-operator, prometheus-operator-fips, kubernetes-fips, docker-compose-fips, seaweedfs, openbao, kubeflow, boring-registry,...