GO-2025-4007 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go-md2man, rancher-loglevel, wave, kiam, cfssl, external-secrets-operator, consul-k8s-fips, gcsfuse, google-osconfig-agent, loki, multus-cni-fips, grafana-fips, pulumi-kubernetes-operator, neuvector-dbgen, pgpool2exporter-fips, spark-operator-fips,...

CLEANSTART-2026-CQ39898 Security fixes in velero-fips 1.18.2-r6

Package velero-fips version 1.18.2-r6 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-BD64085 Security fixes in velero-fips 1.13.2-r0

Package velero-fips version 1.13.2-r0 fixes 1 vulnerabilities: ghsa-m5vv-6r4h-3vj9...

CLEANSTART-2026-JG21544 Security fixes in velero-fips 1.18.0-r0

Package velero-fips version 1.18.0-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186...

CLEANSTART-2026-YB99033 Security fixes in velero-fips 1.17.2-r4

Package velero-fips version 1.17.2-r4 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-MZ11582 Security fixes in velero-fips 1.17.1-r1

Package velero-fips version 1.17.1-r1 fixes 9 vulnerabilities: CVE-2025-61730, CVE-2025-61726, CVE-2025-61728, CVE-2025-68121, CVE-2026-27142...

CLEANSTART-2026-YW64226 Security fixes in velero-fips 1.15.2-r0

Package velero-fips version 1.15.2-r0 fixes 1 vulnerabilities: ghsa-mh63-6h87-95cp...

CLEANSTART-2026-VP67440 Security fixes in velero-fips 1.18.0-r1

Package velero-fips version 1.18.0-r1 fixes 5 vulnerabilities: CVE-2026-32288, CVE-2026-33810, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-xmrv-pmrh-hhx2...

CLEANSTART-2026-CV18777 Security fixes in velero-fips 1.17.2-r5

Package velero-fips version 1.17.2-r5 fixes 6 vulnerabilities: CVE-2026-33810, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283...

CLEANSTART-2026-FP57093 Security fixes in velero-fips 1.17.2-r0

Package velero-fips version 1.17.2-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-68119...

CLEANSTART-2026-MR48582 Security fixes in velero-fips 1.18.0-r2

Package velero-fips version 1.18.0-r2 fixes 2 vulnerabilities: CVE-2026-35469, ghsa-pc3f-x583-g7j2...

CLEANSTART-2026-SD41440 Security fixes in velero-fips 1.18.0-r3

Package velero-fips version 1.18.0-r3 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-QY76332 Security fixes in velero-fips 1.16.2-r2

Package velero-fips version 1.16.2-r2 fixes 4 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, CVE-2025-61729, CVE-2025-61729...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, crossplane-provider-gcp-beta-container, neuvector-scanner, plugin-barman-cloud, external-secrets-operator, kubernetes-fips, consul-k8s-fips, opensearch-datasource-fips, gcsfuse,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, crossplane-provider-gcp-beta-container, neuvector-scanner, plugin-barman-cloud, external-secrets-operator, kubernetes-fips, consul-k8s-fips, opensearch-datasource-fips, gcsfuse,...

CLEANSTART-2026-WL14185 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CLEANSTART-2026-VN02574 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CLEANSTART-2026-FB07695 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Multiple security vulnerabilities affect the velero-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. See references for individual vulnerability...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, teleport-operator-fips, neuvector-scanner, external-secrets-operator, consul-k8s-fips, gcsfuse, google-osconfig-agent, loki, grafana-mimir-fips, grafana-fips, kubescape-server-fips, steampipe, chainloop-control-plane, buildah-fips, distribution,...

CLEANSTART-2026-LS12576 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.16.2-r2, 1.17.2-r0, 1.17.2-r1, 1.18.0-r0

Multiple security vulnerabilities affect the velero-fips package. These issues are resolved in later releases. See references for individual vulnerability details...