GO-2025-4007 vulnerabilities

Vulnerabilities for packages: trivy, kubernetes-csi-external-attacher-fips, kube-oidc-proxy, rancher-loglevel, kiali, envconsul, mongo-tools, ytt-fips, prometheus-blackbox-exporter, crossplane-function-go-templating, wire-go, docker-credential-acr-env, ratify-fips, openbao-k8s, pushprox,...

CLEANSTART-2026-CQ39898 Security fixes in velero-fips 1.18.2-r6

Package velero-fips version 1.18.2-r6 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-JG21544 Security fixes in velero-fips 1.18.0-r0

Package velero-fips version 1.18.0-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186...

CLEANSTART-2026-YW64226 Security fixes in velero-fips 1.15.2-r0

Package velero-fips version 1.15.2-r0 fixes 1 vulnerabilities: ghsa-mh63-6h87-95cp...

CLEANSTART-2026-BD64085 Security fixes in velero-fips 1.13.2-r0

Package velero-fips version 1.13.2-r0 fixes 1 vulnerabilities: ghsa-m5vv-6r4h-3vj9...

CLEANSTART-2026-MZ11582 Security fixes in velero-fips 1.17.1-r1

Package velero-fips version 1.17.1-r1 fixes 9 vulnerabilities: CVE-2025-61730, CVE-2025-61726, CVE-2025-61728, CVE-2025-68121, CVE-2026-27142...

CLEANSTART-2026-YB99033 Security fixes in velero-fips 1.17.2-r4

Package velero-fips version 1.17.2-r4 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-FP57093 Security fixes in velero-fips 1.17.2-r0

Package velero-fips version 1.17.2-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-68119...

CLEANSTART-2026-MR48582 Security fixes in velero-fips 1.18.0-r2

Package velero-fips version 1.18.0-r2 fixes 2 vulnerabilities: CVE-2026-35469, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-VP67440 Security fixes in velero-fips 1.18.0-r1

Package velero-fips version 1.18.0-r1 fixes 5 vulnerabilities: CVE-2026-32288, CVE-2026-33810, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-xmrv-pmrh-hhx2...

CLEANSTART-2026-CV18777 Security fixes in velero-fips 1.17.2-r5

Package velero-fips version 1.17.2-r5 fixes 6 vulnerabilities: CVE-2026-33810, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283...

CLEANSTART-2026-SD41440 Security fixes in velero-fips 1.18.0-r3

Package velero-fips version 1.18.0-r3 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-QY76332 Security fixes in velero-fips 1.16.2-r2

Package velero-fips version 1.16.2-r2 fixes 4 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, CVE-2025-61729, CVE-2025-61729...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: trivy, crossplane-provider-aws-secretsmanager, crossplane-provider-azure-orbital, kubernetes-csi-external-attacher-fips, kube-oidc-proxy, kubo, crossplane-provider-sql, volcano-fips, eks-node-monitoring-agent-fips, kiali, crossplane-provider-aws-elb, k8s-image-swappe...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: trivy, crossplane-provider-aws-secretsmanager, crossplane-provider-azure-orbital, kubernetes-csi-external-attacher-fips, kube-oidc-proxy, kubo, crossplane-provider-sql, volcano-fips, eks-node-monitoring-agent-fips, kiali, crossplane-provider-aws-elb, k8s-image-swappe...

CLEANSTART-2026-WL14185 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CLEANSTART-2026-VN02574 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CLEANSTART-2026-FB07695 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Multiple security vulnerabilities affect the velero-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. See references for individual vulnerability...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: trivy, kube-oidc-proxy, kubo, kiali, envconsul, clickhouse-backup-fips, commercial-chainloop-backend, ratify-fips, spicedb-fips, kiali-fips, rekor, vault-benchmark, scorecard, spiffe-helper-fips, tflint-fips, trillian-fips, argo-cd, flyte, cluster-api-aws-controller,...

CLEANSTART-2026-LS12576 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.16.2-r2, 1.17.2-r0, 1.17.2-r1, 1.18.0-r0

Multiple security vulnerabilities affect the velero-fips package. These issues are resolved in later releases. See references for individual vulnerability details...