CLEANSTART-2026-WI36826 Security fix for GHSA-4hfp-h4cw-hj8p applied in: cert-manager-cmctl-fips 2.1.1-r0, chartmuseum-fips 0.14.0-r1, chartmuseum-fips 0.15.0-r4, kubevela 1.10.8-r0

GHSA-4hfp-h4cw-hj8p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BK83447 Security fix for CVE-2023-2454 applied in: postgresql15 15.3-r0

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UO59647 Security fix for GHSA-2c4m-59x9-fr2g applied in: chartmuseum-fips 0.14.0-r1, chartmuseum-fips 0.15.0-r4

GHSA-2c4m-59x9-fr2g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XN74910 Security fix for GHSA-f5fw-25gw-5m92 applied in: druid-fips 35.0.0-r1, spark-sc213-jdk17-py312 3.5.8-r0

GHSA-f5fw-25gw-5m92 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZL12705 Security fix for GHSA-cgp8-4m63-fhh5 applied in: druid-fips 35.0.0-r1, spark-sc213-jdk17-py312 3.5.8-r0

GHSA-cgp8-4m63-fhh5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CD25563 Security fix for GHSA-vvpx-j8f3-3w6h applied in: cfssl 1.5.0-r1, multus-cni-fips 3.9.3-r2, wavefront-collector-for-kubernetes 1.13.0-r0

GHSA-vvpx-j8f3-3w6h affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-PK28736 Security fix for GHSA-ppp9-7jff-5vj2 applied in: multus-cni-fips 3.9.3-r2

Security vulnerability affects the multus-cni-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VD60296 Security fix for GHSA-8c26-wmh5-6g9v applied in: cfssl 1.5.0-r1, multus-cni-fips 3.9.3-r2

GHSA-8c26-wmh5-6g9v affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GW81743 Security fix for GHSA-83g2-8m93-v3w7 applied in: cfssl 1.5.0-r1, multus-cni-fips 3.9.3-r2

GHSA-83g2-8m93-v3w7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-OY13195 Security fix for CVE-2024-12401 applied in: cert-manager-webhook-pdns-fips 2.3.0-r0

Security vulnerability affects the cert-manager-webhook-pdns-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PD56220 Security fix for CVE-2022-27664 applied in: cert-manager-webhook-pdns-fips 2.3.0-r0, cfssl 1.5.0-r1

CVE-2022-27664 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PI41655 Security fix for CVE-2022-1996 applied in: argo-events 1.6.3-r1, cert-manager-webhook-pdns-fips 2.3.0-r0, kserve-modelmesh-serving 0.9.0-r1, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r2

CVE-2022-1996 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QA96824 Security fix for GHSA-32fw-gq77-f2f2 applied in: elastic-beats-fips 8.19.8-r0, elastic-beats-fips 9.0.8-r2, elastic-beats-fips 9.1.8-r0, elastic-beats-fips 9.2.2-r0

GHSA-32fw-gq77-f2f2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VS01859 Security fix for CVE-2024-25621 applied in: cert-manager-cmctl-fips 2.1.1-r0, cert-manager-cmctl-fips 2.3.0-r0, rancher-agent 2.11.15-r2

CVE-2024-25621 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JE88659 Security fix for CVE-2025-22866 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0

CVE-2025-22866 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZO30257 Security fix for CVE-2017-15896 applied in: nodejs 8.9.3-r0

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-VV56547 Security fix for GHSA-mfv7-gq43-w965 applied in: nfs-subdir-external-provisioner-fips 4.0.16-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QW15283 Security fix for CVE-2018-1000168 applied in: nodejs 8.11.3-r0

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZF37263 Security fix for CVE-2024-35195 applied in: k8s-sidecar 1.25.2-r0, py3-requests 2.32.3-r0, py3.14-requests 2.32.3-r0

CVE-2024-35195 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UC71482 Security fix for CVE-2025-8556 applied in: argo-workflows-fips 3.5.15-r1, argo-workflows-fips 3.6.13-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, policy-controller 0.12.1-r1

CVE-2025-8556 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SI46546 Security fix for GHSA-rj7p-rfgp-852x applied in: cassandra-fips 3.11.19-r6, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, stargate 2.0.44-r4

GHSA-rj7p-rfgp-852x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JZ93386 Security fix for GHSA-wjxj-f8rg-99wx applied in: cassandra-fips 3.11.19-r6, stargate 2.0.44-r4

GHSA-wjxj-f8rg-99wx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-DR78602 Security fix for CVE-2024-55885 applied in: harbor-fips 2.11.2-r5

Security vulnerability affects the harbor-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OT05000 Security fix for GHSA-r5p3-955p-5ggq applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r5, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4

GHSA-r5p3-955p-5ggq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MH57563 Security fix for GHSA-hgv6-w7r3-w4qw applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r5, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9

GHSA-hgv6-w7r3-w4qw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SG37837 Security fix for CVE-2025-58251 applied in: velero 1.17.0-r0

Security vulnerability affects the velero package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FG94911 Security fix for GHSA-8qq5-rm4j-mr97 applied in: mongosh 2.5.10-r5, mongosh 2.8.1-r0, renovate 43.4.4-r0, sqlpad 7.5.7-r0, thingsboard 4.2.1.1-r1, thingsboard-tb-web-ui 4.2.1.1-r1

GHSA-8qq5-rm4j-mr97 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CM07098 Security fix for CVE-2023-52426 applied in: expat 2.6.0-r0

Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XR93772 Security fix for CVE-2024-4032 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, kserve-storage-controller 0.19.0-r0, python3 3.12.6-r0

CVE-2024-4032 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CP81765 Security fix for CVE-2019-7317 applied in: libpng 1.6.37-r0, openjdk8 8.222.10-r0

CVE-2019-7317 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BV58345 Security fix for GHSA-jqc5-w2xx-5vq4 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, kyverno-fips 1.16.3-r3, sigstore-scaffolding 0.7.31-r1, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

GHSA-jqc5-w2xx-5vq4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WJ40608 Security fix for GHSA-434x-w66g-qw3r applied in: shadowsocks-rust 1.24.0-r0, wasmtime 40.0.0-r0, ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r0, ztunnel-fips 1.28.4-r0, ztunnel-fips 1.29.0-r0

GHSA-434x-w66g-qw3r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LE78036 Security fix for GHSA-r6v5-fh4h-64xc applied in: cedar 4.11.2-r1, shadowsocks-rust 1.24.0-r0, ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r0, ztunnel-fips 1.27.8-r3, ztunnel-fips 1.28.4-r0, ztunnel-fips 1.29.0-r0

GHSA-r6v5-fh4h-64xc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RI42866 Security fix for GHSA-273p-m2cw-6833 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

GHSA-273p-m2cw-6833 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FY63723 Security fix for CVE-2026-2391 applied in: argo-workflows 3.6.19-r8, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r0, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-2391 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZJ48818 Security fix for CVE-2016-8615 applied in: curl 7.51.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VH87941 Security fix for CVE-2018-1000301 applied in: curl 7.60.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OR86338 Security fix for CVE-2018-16890 applied in: curl 7.64.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AP31271 Security fix for CVE-2021-22925 applied in: curl 7.78.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UF88826 Security fix for CVE-2022-27779 applied in: curl 7.83.1-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JD03338 Security fix for CVE-2024-0853 applied in: curl 8.6.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BE82466 Security fix for CVE-2026-32141 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-32141 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LX31883 Security fix for GHSA-gx3x-vq4p-mhhv applied in: cert-manager-cmctl 2.3.0-r1, cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1

GHSA-gx3x-vq4p-mhhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YX43622 Security fix for CVE-2025-67735 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r1, apicurio-registry 3.1.7-r6, cloud-config-server 4.3.2-r3, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kogito-apps 10.1.0-r0, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0, s3proxy 3.3.0-r1, stargate 1.0.90-r4, stargate 2.0.44-r4, strimzi-kafka-operator 0.46.1-r3, strimzi-kafka-operator 0.47.0-r2, strimzi-kafka-operator 0.48.0-r1, wavefront-proxy 13.9-r0

CVE-2025-67735 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SA24453 Security fix for CVE-2025-49005 applied in: jitsucom-jitsu 2.11.0-r0

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UA23791 Security fix for GHSA-hhhw-99gj-p3c3 applied in: cassandra-fips 4.0.19-r2, cassandra-fips 4.1.10-r1

GHSA-hhhw-99gj-p3c3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QF71813 Security fix for GHSA-c4r9-r8fh-9vj2 applied in: cassandra-fips 4.0.19-r2, cassandra-fips 4.1.10-r1

GHSA-c4r9-r8fh-9vj2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QU79402 Security fix for GHSA-mjmj-j48q-9wg2 applied in: cassandra-fips 4.0.19-r2, cassandra-fips 4.1.10-r1, cassandra-reaper-fips 3.6.1-r3, s3proxy 3.3.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, stargate 2.0.44-r4

GHSA-mjmj-j48q-9wg2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UV31886 Security fix for CVE-2024-31573 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GK84785 Security fix for CVE-2024-29857 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...