CLEANSTART-2026-FH60481 Security fix for CVE-2021-3177 applied in: python3 3.8.7-r2

Security vulnerability affects the python3 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XR93772 Security fix for CVE-2024-4032 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, kserve-storage-controller 0.19.0-r0, python3 3.12.6-r0

CVE-2024-4032 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LU70983 Security fix for CVE-2026-25646 applied in: apache-zookeeper 3.7.2-r4, libpng 1.6.54-r0, tomcat11 11.0.18-r0

CVE-2026-25646 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RI42866 Security fix for GHSA-273p-m2cw-6833 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

GHSA-273p-m2cw-6833 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VH87941 Security fix for CVE-2018-1000301 applied in: curl 7.60.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OR86338 Security fix for CVE-2018-16890 applied in: curl 7.64.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UF88826 Security fix for CVE-2022-27779 applied in: curl 7.83.1-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JO97446 Security fix for CVE-2022-42915 applied in: curl 7.86.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JD03338 Security fix for CVE-2024-0853 applied in: curl 8.6.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PK50188 Security fix for CVE-2024-2398 applied in: curl 8.7.1-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YC05676 Security fix for CVE-2025-5025 applied in: curl 8.14.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WP10370 Security fix for CVE-2026-1526 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-1526 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YX43622 Security fix for CVE-2025-67735 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r1, apicurio-registry 3.1.7-r6, cloud-config-server 4.3.2-r3, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kogito-apps 10.1.0-r0, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0, s3proxy 3.3.0-r1, stargate 1.0.90-r4, stargate 2.0.44-r4, strimzi-kafka-operator 0.46.1-r3, strimzi-kafka-operator 0.47.0-r2, strimzi-kafka-operator 0.48.0-r1, wavefront-proxy 13.9-r0

CVE-2025-67735 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QF71813 Security fix for GHSA-c4r9-r8fh-9vj2 applied in: cassandra-fips 4.0.19-r2, cassandra-fips 4.1.10-r1

GHSA-c4r9-r8fh-9vj2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VV70197 Security fix for GHSA-98wm-3w3q-mw94 applied in: cassandra-fips 4.0.19-r2, cassandra-fips 4.1.10-r1

GHSA-98wm-3w3q-mw94 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UV31886 Security fix for CVE-2024-31573 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JT87240 Security fix for CVE-2026-23991 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.3-r3, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1, tkn-fips 0.43.0-r3

CVE-2026-23991 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GK84785 Security fix for CVE-2024-29857 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YD82249 Security fix for CVE-2025-4138 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, kserve-storage-controller 0.19.0-r0, python3 3.12.11-r0

CVE-2025-4138 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YB84757 Security fix for CVE-2025-4330 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, kserve-storage-controller 0.19.0-r0, python3 3.12.11-r0

CVE-2025-4330 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SO54386 Security fix for CVE-2023-34462 applied in: apache-hive 4.0.0-r1, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-reaper-fips 3.6.1-r3, stargate 1.0.90-r4, stargate 2.0.44-r4, stargate 2.0.44-r6

CVE-2023-34462 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX30626 Security fix for CVE-2021-21409 applied in: cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2

CVE-2021-21409 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BX78459 Security fix for CVE-2023-2976 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r0, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, cloud-config-server 4.3.2-r3, maven 3.8.6-r1, maven 3.8.9-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, stargate 1.0.90-r4, stargate 1.0.91-r1, stargate 2.0.44-r4, strimzi-kafka-operator 0.47.0-r2

CVE-2023-2976 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KO91449 Security fix for CVE-2026-4428 applied in: ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.27.8-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.29.1-r0

CVE-2026-4428 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CP29339 Security fix for GHSA-9f94-5g5w-gf6r applied in: ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.27.8-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.28.5-r0, ztunnel-fips 1.29.1-r0

GHSA-9f94-5g5w-gf6r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PS45852 Security fix for CVE-2023-52428 applied in: stargate 1.0.90-r4

Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NW65912 Security fix for CVE-2025-67499 applied in: calico-fips 3.31.2-r2

Security vulnerability affects the calico-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OH46796 Security fix for CVE-2022-36056 applied in: cosign 1.12.1-r0

Security vulnerability affects the cosign package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JO61169 Security fix for CVE-2025-25193 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r1, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, stargate 1.0.90-r4, stargate 2.0.44-r4, wavefront-proxy 13.9-r0

CVE-2025-25193 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FZ71695 Security fix for CVE-2025-59419 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r1, stargate 1.0.90-r4, stargate 1.0.91-r1, stargate 2.0.44-r4

CVE-2025-59419 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN19549 Security fix for GHSA-rjcw-vg7j-m9rc applied in: kubescape 3.0.47-r1

Security vulnerability affects the kubescape package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HS17882 Security fix for GHSA-55g7-9cwv-5qfv applied in: stargate 1.0.90-r4

Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EQ27053 Security fix for CVE-2025-64715 applied in: hubble-ui 0.13.3-r0, hubble-ui-fips 0.13.3-r0

CVE-2025-64715 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BG00340 Security fix for CVE-2025-27817 applied in: kogito-apps 10.1.0-r0

Security vulnerability affects the kogito-apps package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AV17233 Security fix for CVE-2025-14762 applied in: logstash-fips 9.2.6-r0

Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV59211 Security fix for CVE-2026-25765 applied in: logstash-fips 9.2.4-r2, logstash-fips 9.2.5-r4, logstash-fips 9.3.0-r2

CVE-2026-25765 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UQ78689 Security fix for CVE-2025-61772 applied in: logstash-fips 9.2.4-r2, logstash-fips 9.2.6-r0

CVE-2025-61772 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SK17501 Security fix for CVE-2025-61770 applied in: logstash-fips 9.2.4-r2, logstash-fips 9.2.6-r0

CVE-2025-61770 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NM96791 Security fix for GHSA-3m6g-2423-7cp3 applied in: logstash-fips 9.2.4-r3, logstash-fips 9.2.5-r3, logstash-fips 9.2.6-r2, logstash-fips 9.3.0-r3, logstash-fips 9.3.1-r0, ruby 3.4.9-r1

GHSA-3m6g-2423-7cp3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OJ67667 Security fix for CVE-2025-65637 applied in: aws-flb-cloudwatch 1.9.4-r0, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, go-discover 0_git20250325-r0, kube-fluentd-operator 1.18.2-r0, paranoia 0.2.1-r0, runc 1.1.14-r0, wavefront-collector-for-kubernetes 1.13.0-r0, zookeeper-operator 0.2.15-r3

CVE-2025-65637 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DU72906 Security fix for CVE-2026-22737 applied in: activemq 5.19.8-r3, activemq 6.1.8-r1, activemq 6.2.3-r0, kafka-ui 1.2.0-r4, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, thingsboard 4.3.0.1-r2

CVE-2026-22737 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SL35444 Security fix for CVE-2023-2253 applied in: paranoia 0.2.1-r0

Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KV26372 Security fix for GHSA-pxq6-2prw-chj9 applied in: paranoia 0.2.1-r0

Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-US13665 Security fix for GHSA-v23v-6jw2-98fq applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, paranoia 0.2.1-r0

GHSA-v23v-6jw2-98fq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BS62288 Security fix for CVE-2026-39882 applied in: argo-workflows 4.0.4-r0, cloudprober 0.13.9-r0, cloudprober 0.14.2-r0, cortex 1.21.0-r1, cortex 1.21.1-r4, distribution 3.1.0-r0, distribution-fips 3.1.0-r0, docker 29.3.0-r1, docker-compose 5.1.0-r0, gitlab-kas 18.5.1-r0, gotenberg 8.30.1-r0, grafana 12.3.10-r1, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r1, grafana-alloy 1.15.1-r1, grafana-alloy 1.16.0-r0, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0, grafana-mimir-fips 2.17.10-r0, grafana-mimir-fips 3.0.5-r1, grafana-rollout-operator 0.36.0-r1, harbor-registry-fips 3.1.1-r0, keda 2.17.2-r2, keda 2.19.0-r3, keda-fips 2.18.3-r3, knative-net-istio 1.21.4-r0, knative-serving 1.21.3-r0, loki 3.6.10-r0, opentelemetry-collector-contrib 0.149.0-r0, opentofu-fips 1.10.9-r4, opentofu-fips 1.11.5-r3, opentofu-fips 1.11.6-r0, opentofu-fips 1.7.10-r4, opentofu-fips 1.8.11-r4, opentofu-fips 1.9.4-r4, prometheus 3.11.0-r2, prometheus 3.5.1-r1, prometheus 3.5.2:r0, prometheus-alertmanager 0.32.0-r0, prometheus-fips 3.11.2-r0, tekton-pipelines 1.10.2-r0, tekton-pipelines 1.11.0-r0, tekton-pipelines 1.7.0-r0, tekton-pipelines 1.9.2-r0, tekton-pipelines-fips 1.7.0-r0, tekton-pipelines-fips 1.9.2-r0, tempo 2.7.2-r2, terraform 1.14.8-r0, terraform 1.15.1-r1, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.97.2-r5, terragrunt-fips 0.98.0-r5, terragrunt-fips 1.0.0-r0

CVE-2026-39882 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LN00510 Security fix for GHSA-w8rr-5gcm-pp58 applied in: argo-workflows 4.0.4-r0, cloudprober-fips 0.13.9-r0, cloudprober-fips 0.14.2-r0, distribution 3.1.0-r0, distribution-fips 3.1.0-r0, docker 29.3.0-r1, docker-compose 5.1.0-r0, gotenberg 8.30.1-r0, grafana 12.2.10-r1, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r1, grafana-alloy 1.15.1-r1, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0, grafana-mimir-fips 2.17.10-r0, grafana-mimir-fips 3.0.5-r1, grafana-mimir-fips 3.0.6-r0, grafana-rollout-operator 0.36.0-r1, keda 2.19.0-r3, keda-fips 2.18.3-r3, loki 3.6.10-r0, opentelemetry-collector-contrib 0.149.0-r0, opentofu-fips 1.10.9-r4, opentofu-fips 1.11.5-r3, opentofu-fips 1.11.6-r0, opentofu-fips 1.7.10-r4, opentofu-fips 1.8.11-r4, opentofu-fips 1.9.4-r4, prometheus 3.5.2:r0, prometheus-fips 3.11.2-r0, tekton-pipelines 1.10.2-r0, tekton-pipelines 1.11.0-r0, tekton-pipelines 1.7.0-r0, tekton-pipelines 1.9.2-r0, tekton-pipelines-fips 1.7.0-r0, tekton-pipelines-fips 1.9.2-r0, tempo 2.7.2-r2, terraform 1.15.1-r1, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.97.2-r5, terragrunt-fips 0.98.0-r5, terragrunt-fips 0.99.5-r0, terragrunt-fips 1.0.1-r1, zot 2.1.13-r2

GHSA-w8rr-5gcm-pp58 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YA15399 Security fix for CVE-2026-33671 applied in: argo-workflows 3.6.19-r8, argo-workflows 3.7.15-r3, argo-workflows 3.7.17-r1, azure-functions-node 4.1052.200-r0, mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r0, renovate 43.123.6-r0, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-33671 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CI51547 Security fix for CVE-2026-33937 applied in: mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2

CVE-2026-33937 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DK08962 Security fix for CVE-2024-45339 applied in: cloudprober 0.11.9-r0, cloudprober-fips 0.12.9-r0, cluster-proportional-autoscaler 1.8.11-r0, ip-masq-agent 2.10.2-r0, ip-masq-agent 2.11.0-r0, ip-masq-agent 2.9.3-r0, step-ca 0.27.5-r0

CVE-2024-45339 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OQ43159 Security fix for CVE-2026-34757 applied in: cassandra-reaper-fips 4.0.1-r3, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0

CVE-2026-34757 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...