CLEANSTART-2026-UX51431 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the velero-fips package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: restic-fips, volsync-fips, trivy, modelmesh-runtime-adapter, go-licenses, kafka-proxy, kube-state-metrics, qemu-guesthelper, mattmoor-chainit, keda, dockerize, google-osconfig-agent, dcgm-exporter, prometheus-mysqld-exporter, metrics-server,...

CLEANSTART-2026-CQ39898 Security fixes in velero-fips 1.18.2-r6

Package velero-fips version 1.18.2-r6 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-MZ11582 Security fixes in velero-fips 1.17.1-r1

Package velero-fips version 1.17.1-r1 fixes 9 vulnerabilities: CVE-2025-61730, CVE-2025-61726, CVE-2025-61728, CVE-2025-68121, CVE-2026-27142...

CLEANSTART-2026-YB99033 Security fixes in velero-fips 1.17.2-r4

Package velero-fips version 1.17.2-r4 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-YW64226 Security fixes in velero-fips 1.15.2-r0

Package velero-fips version 1.15.2-r0 fixes 1 vulnerabilities: ghsa-mh63-6h87-95cp...

CLEANSTART-2026-JG21544 Security fixes in velero-fips 1.18.0-r0

Package velero-fips version 1.18.0-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186...

CLEANSTART-2026-BD64085 Security fixes in velero-fips 1.13.2-r0

Package velero-fips version 1.13.2-r0 fixes 1 vulnerabilities: ghsa-m5vv-6r4h-3vj9...

CLEANSTART-2026-CV18777 Security fixes in velero-fips 1.17.2-r5

Package velero-fips version 1.17.2-r5 fixes 6 vulnerabilities: CVE-2026-33810, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283...

CLEANSTART-2026-SD41440 Security fixes in velero-fips 1.18.0-r3

Package velero-fips version 1.18.0-r3 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-FP57093 Security fixes in velero-fips 1.17.2-r0

Package velero-fips version 1.17.2-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-68119...

CLEANSTART-2026-MR48582 Security fixes in velero-fips 1.18.0-r2

Package velero-fips version 1.18.0-r2 fixes 2 vulnerabilities: CVE-2026-35469, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-VP67440 Security fixes in velero-fips 1.18.0-r1

Package velero-fips version 1.18.0-r1 fixes 5 vulnerabilities: CVE-2026-32288, CVE-2026-33810, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-xmrv-pmrh-hhx2...

CLEANSTART-2026-QY76332 Security fixes in velero-fips 1.16.2-r2

Package velero-fips version 1.16.2-r2 fixes 4 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, CVE-2025-61729, CVE-2025-61729...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: kyverno-fips, restic-fips, volsync-fips, trivy, gitlab-cng, crossplane-provider-aws-vpc-fips, kube-state-metrics, k9s-fips, keda, google-osconfig-agent, crossplane-provider-aws-rds, metrics-server, gitlab-runner, kubernetes-csi-external-snapshotter,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kyverno-fips, restic-fips, volsync-fips, trivy, gitlab-cng, crossplane-provider-aws-vpc-fips, kube-state-metrics, k9s-fips, keda, google-osconfig-agent, crossplane-provider-aws-rds, metrics-server, gitlab-runner, kubernetes-csi-external-snapshotter,...

CLEANSTART-2026-WL14185 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CLEANSTART-2026-VN02574 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CLEANSTART-2026-FB07695 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Multiple security vulnerabilities affect the velero-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. See references for individual vulnerability...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: kyverno-fips, restic-fips, trivy, gitlab-cng, k9s-fips, keda, google-osconfig-agent, gitlab-runner, terragrunt-fips, zarf, grafana-mimir-fips, kube-arangodb, kyverno-notation-aws, cluster-api-aws-controller-fips, octo-sts, seaweedfs-operator-fips, spicedb, azcopy-fip...