GO-2026-5199 vulnerabilities

Vulnerabilities for packages: vault, splunk-otel-collector-fips, splunk-otel-collector, vault-fips...

GO-2026-5487 vulnerabilities

Vulnerabilities for packages: vault, splunk-otel-collector-fips, splunk-otel-collector, vault-fips...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, k3s, fuse-overlayfs-snapshotter, cloudbeat, loki, commercial-expanso-edge, consul, frankenphp-8.3, vault, datadog-agent, zot, beats-fips, cloudbeat-fips, mattermost, kine, consul-fips, vault-fips, beats, containerd, grafana, rke2-runtime,...

GO-2026-5004 vulnerabilities

Vulnerabilities for packages: authentik-fips, rke2-runtime-fips, k3s, commercial-expanso-edge, keda-fips, step-ca, goose-fips, gitlab-kas, step-ca-fips, spire-server-fips, juicefs, spqr, kube-bench, dapr, ferretdb, spicedb-fips, gitlab-cng, grafana, step-issuer-fips, spire-server, hydra,...

CLEANSTART-2026-FB10521 Security fixes in vault-fips 1.21.2-r1

Package vault-fips version 1.21.2-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: authentik-fips, grype, reports-server, gitlab-workhorse-ce, rke2-runtime-fips, k3s, virt-operator, podman, knative-operator-fips, azure-aad-pod-identity-mic, commercial-expanso-edge, docker-fips, keda-fips, frankenphp-8.3, chainloop-cli-fips, redka, cert-manager-fips...

CVE-2026-3605 vulnerabilities

Vulnerabilities for packages: vault, splunk-otel-collector-fips, splunk-otel-collector, vault-fips...

GHSA-M2W4-8GGF-RJ47 vulnerabilities

Vulnerabilities for packages: vault, splunk-otel-collector-fips, splunk-otel-collector, vault-fips...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, reports-server, go-discover, knative-kafka-broker, tekton-chains, k3s, podman, argo-events-fips, hcloud, cloudbeat, commercial-expanso-edge, falcoctl, external-dns, crossplane-provider-azure-web, docker-fips, keda-fips, step-ca-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, reports-server, go-discover, knative-kafka-broker, tekton-chains, k3s, podman, argo-events-fips, hcloud, cloudbeat, commercial-expanso-edge, falcoctl, external-dns, crossplane-provider-azure-web, docker-fips, keda-fips, step-ca-fips,...

CLEANSTART-2026-GX87608 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-33186, ghsa-j88v-2chj-qfwx, ghsa-pjcq-xvwq-hhpj applied in versions: 1.21.2-r0, 1.21.2-r1, 2.0.0-r0

Multiple security vulnerabilities affect the vault-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: authentik-fips, rke2-runtime-fips, k3s, commercial-expanso-edge, keda-fips, step-ca, goose-fips, gitlab-kas, step-ca-fips, spire-server-fips, juicefs, spqr, kube-bench, dapr, ferretdb, spicedb-fips, gitlab-cng, grafana, step-issuer-fips, spire-server, hydra,...

CLEANSTART-2026-VL19675 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.21.2-r0, 1.21.2-r1

Multiple security vulnerabilities affect the vault-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, grype, pulumi-language-java, helm-push, reports-server, crossplane-provider-aws-memorydb-fips, boring-registry, argo-events-fips, cloudbeat, gitlab-operator, docker-fips, kubevela, terraform-provider-databricks, kyverno-notation-aws,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: actions-runner-controller, grype, pulumi-language-java, helm-push, reports-server, crossplane-provider-aws-memorydb-fips, boring-registry, argo-events-fips, cloudbeat, gitlab-operator, docker-fips, kubevela, terraform-provider-databricks, kyverno-notation-aws,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: reports-server, k3s, db-operator, keda-fips, mariadb-operator, step-ca, goose-fips, step-ca-fips, percona-xtradb-cluster-operator, spire-server-fips, juicefs, apko-fips, agentbeat, gitsign, kyverno-policy-reporter-fips, sops-fips, spicedb-fips, kyverno-fips,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, neuvector-scanner-fips, k3s, portieris-fips, rancher, cluster-api, cluster-api-helm-controller, falcoctl, falcoctl-fips, tekton-pipelines-fips, xeol-fips, tekton-pipelines, harbor-fips, vault, docker-credential-gcr-fips, openbao-fips, portieris,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, neuvector-scanner-fips, k3s, portieris-fips, rancher, cluster-api, cluster-api-helm-controller, falcoctl, falcoctl-fips, tekton-pipelines-fips, xeol-fips, tekton-pipelines, harbor-fips, vault, docker-credential-gcr-fips, openbao-fips, portieris,...

GHSA-WPFP-CM49-9M9Q vulnerabilities

Vulnerabilities for packages: vault, opentofu-fips, opentofu, terraform...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, pulumi-language-java, boring-registry, sigstore-scaffolding-fips, azure-aad-pod-identity-mic, gcp-compute-persistent-disk-csi-driver-fips, distribution, docker-fips, kafkaexporter-fips, step-ca, kyverno-notation-aws, hugo-fips,...