CLEANSTART-2026-GK84785 Security fix for CVE-2024-29857 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YD82249 Security fix for CVE-2025-4138 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, kserve-storage-controller 0.19.0-r0, python3 3.12.11-r0

CVE-2025-4138 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YB84757 Security fix for CVE-2025-4330 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, kserve-storage-controller 0.19.0-r0, python3 3.12.11-r0

CVE-2025-4330 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV95785 Security fix for CVE-2025-48924 applied in: apache-hive 4.0.0-r0, apache-hive 4.0.1-r8, apache-hive 4.2.0-r0, apache-nifi 2.6.0-r3, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, elasticsearch 9.3.5-r0, elasticsearch 9.3.5-r2, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kogito-apps 10.1.0-r0, logstash-fips 8.19.12-r0, logstash-fips 9.2.6-r2, logstash-fips 9.3.1-r0, maven 3.8.6-r1, maven 3.8.9-r1, solr 9.8.0-r0, sonarqube 25.12.0.117093-r3, sonarqube 26.4.0.121862-r2, stargate 1.0.90-r4, stargate 1.0.91-r2, stargate 2.0.44-r4, stargate 2.0.44-r6, stargate 2.0.48-r0, strimzi-kafka-operator 0.47.0-r2, thingsboard 4.0.2-r0, thingsboard 4.1-r0, wavefront-proxy 13.9-r0

CVE-2025-48924 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SO54386 Security fix for CVE-2023-34462 applied in: apache-hive 4.0.0-r1, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-reaper-fips 3.6.1-r3, stargate 1.0.90-r4, stargate 2.0.44-r4, stargate 2.0.44-r6

CVE-2023-34462 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX30626 Security fix for CVE-2021-21409 applied in: cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2

CVE-2021-21409 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BX78459 Security fix for CVE-2023-2976 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r0, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, cloud-config-server 4.3.2-r3, maven 3.8.6-r1, maven 3.8.9-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, stargate 1.0.90-r4, stargate 1.0.91-r1, stargate 2.0.44-r4, strimzi-kafka-operator 0.47.0-r2

CVE-2023-2976 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KO91449 Security fix for CVE-2026-4428 applied in: ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.27.8-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.29.1-r0

CVE-2026-4428 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BF52327 Security fix for CVE-2022-3510 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r0, spark-sc213-jdk17-py312 3.4.4-r1, spark-sc213-jdk17-py312 3.5.8-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

CVE-2022-3510 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HK32575 Security fix for CVE-2022-3509 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r0, spark-sc213-jdk17-py312 3.4.4-r1, spark-sc213-jdk17-py312 3.5.8-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

CVE-2022-3509 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NW65912 Security fix for CVE-2025-67499 applied in: calico-fips 3.31.2-r2

Security vulnerability affects the calico-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JO61169 Security fix for CVE-2025-25193 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r1, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, stargate 1.0.90-r4, stargate 2.0.44-r4, wavefront-proxy 13.9-r0

CVE-2025-25193 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UT87465 Security fix for CVE-2024-47535 applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, stargate 1.0.90-r4, stargate 2.0.44-r4, wavefront-proxy 13.9-r0

CVE-2024-47535 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FZ71695 Security fix for CVE-2025-59419 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r1, stargate 1.0.90-r4, stargate 1.0.91-r1, stargate 2.0.44-r4

CVE-2025-59419 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN19549 Security fix for GHSA-rjcw-vg7j-m9rc applied in: kubescape 3.0.47-r1

Security vulnerability affects the kubescape package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JS89270 Security fix for CVE-2026-33481 applied in: kubescape 3.0.47-r1

Security vulnerability affects the kubescape package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HS17882 Security fix for GHSA-55g7-9cwv-5qfv applied in: stargate 1.0.90-r4

Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BG00340 Security fix for CVE-2025-27817 applied in: kogito-apps 10.1.0-r0

Security vulnerability affects the kogito-apps package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AV17233 Security fix for CVE-2025-14762 applied in: logstash-fips 9.2.6-r0

Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV59211 Security fix for CVE-2026-25765 applied in: logstash-fips 9.2.4-r2, logstash-fips 9.2.5-r4, logstash-fips 9.3.0-r2

CVE-2026-25765 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NM96791 Security fix for GHSA-3m6g-2423-7cp3 applied in: logstash-fips 9.2.4-r3, logstash-fips 9.2.5-r3, logstash-fips 9.2.6-r2, logstash-fips 9.3.0-r3, logstash-fips 9.3.1-r0, ruby 3.4.9-r1

GHSA-3m6g-2423-7cp3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GD99974 Security fix for CVE-2026-33210 applied in: logstash-fips 9.2.4-r3, logstash-fips 9.2.5-r3, logstash-fips 9.2.6-r2, logstash-fips 9.3.0-r3, logstash-fips 9.3.1-r0, ruby 3.4.9-r1

CVE-2026-33210 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AG97190 Security fix for CVE-2026-33891 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, jitsucom-jitsu 2.11.0-r3, opensearch-dashboards-fips 2.19.5-r0

CVE-2026-33891 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OJ67667 Security fix for CVE-2025-65637 applied in: aws-flb-cloudwatch 1.9.4-r0, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, go-discover 0_git20250325-r0, kube-fluentd-operator 1.18.2-r0, paranoia 0.2.1-r0, runc 1.1.14-r0, wavefront-collector-for-kubernetes 1.13.0-r0, zookeeper-operator 0.2.15-r3

CVE-2025-65637 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RF51204 Security fix for CVE-2026-33349 applied in: jitsucom-jitsu 2.11.0-r3, mongosh 2.6.0-r4

CVE-2026-33349 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SJ56797 Security fix for CVE-2026-32887 applied in: jitsucom-jitsu 2.11.0-r3

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FD72989 Security fix for GHSA-6r3c-xf4w-jxjm applied in: kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1

GHSA-6r3c-xf4w-jxjm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DU72906 Security fix for CVE-2026-22737 applied in: activemq 5.19.8-r3, activemq 6.1.8-r1, activemq 6.2.3-r0, kafka-ui 1.2.0-r4, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, thingsboard 4.3.0.1-r2

CVE-2026-22737 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DZ61403 Security fix for CVE-2026-22732 applied in: apache-nifi 2.7.2-r2, kafka-ui 1.2.0-r4, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, thingsboard 4.3.0.1-r3, thingsboard 4.3.1-r1

CVE-2026-22732 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TN85120 Security fix for CVE-2026-35172 applied in: gitness 3.0.1-r1, gitness 3.1.1-r1, gitness 3.2.0-r1, gitness 3.3.0-r2, lvm-driver 1.7.0-r1

CVE-2026-35172 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SL35444 Security fix for CVE-2023-2253 applied in: paranoia 0.2.1-r0

Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KV26372 Security fix for GHSA-pxq6-2prw-chj9 applied in: paranoia 0.2.1-r0

Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-US13665 Security fix for GHSA-v23v-6jw2-98fq applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, paranoia 0.2.1-r0

GHSA-v23v-6jw2-98fq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BS62288 Security fix for CVE-2026-39882 applied in: argo-workflows 4.0.4-r0, cloudprober 0.13.9-r0, cloudprober 0.14.2-r0, cortex 1.21.0-r1, cortex 1.21.1-r4, distribution 3.1.0-r0, distribution-fips 3.1.0-r0, docker 29.3.0-r1, docker-compose 5.1.0-r0, gitlab-kas 18.5.1-r0, gotenberg 8.30.1-r0, grafana 12.3.10-r1, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r1, grafana-alloy 1.15.1-r1, grafana-alloy 1.16.0-r0, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0, grafana-mimir-fips 2.17.10-r0, grafana-mimir-fips 3.0.5-r1, grafana-rollout-operator 0.36.0-r1, harbor-registry-fips 3.1.1-r0, keda 2.17.2-r2, keda 2.19.0-r3, keda-fips 2.18.3-r3, knative-net-istio 1.21.4-r0, knative-serving 1.21.3-r0, loki 3.6.10-r0, opentelemetry-collector-contrib 0.149.0-r0, opentofu-fips 1.10.9-r4, opentofu-fips 1.11.5-r3, opentofu-fips 1.11.6-r0, opentofu-fips 1.7.10-r4, opentofu-fips 1.8.11-r4, opentofu-fips 1.9.4-r4, prometheus 3.11.0-r2, prometheus 3.5.1-r1, prometheus 3.5.2:r0, prometheus-alertmanager 0.32.0-r0, prometheus-fips 3.11.2-r0, tekton-pipelines 1.10.2-r0, tekton-pipelines 1.11.0-r0, tekton-pipelines 1.7.0-r0, tekton-pipelines 1.9.2-r0, tekton-pipelines-fips 1.7.0-r0, tekton-pipelines-fips 1.9.2-r0, tempo 2.7.2-r2, terraform 1.14.8-r0, terraform 1.15.1-r1, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.97.2-r5, terragrunt-fips 0.98.0-r5, terragrunt-fips 1.0.0-r0

CVE-2026-39882 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LN00510 Security fix for GHSA-w8rr-5gcm-pp58 applied in: argo-workflows 4.0.4-r0, cloudprober-fips 0.13.9-r0, cloudprober-fips 0.14.2-r0, distribution 3.1.0-r0, distribution-fips 3.1.0-r0, docker 29.3.0-r1, docker-compose 5.1.0-r0, gotenberg 8.30.1-r0, grafana 12.2.10-r1, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r1, grafana-alloy 1.15.1-r1, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0, grafana-mimir-fips 2.17.10-r0, grafana-mimir-fips 3.0.5-r1, grafana-mimir-fips 3.0.6-r0, grafana-rollout-operator 0.36.0-r1, keda 2.19.0-r3, keda-fips 2.18.3-r3, loki 3.6.10-r0, opentelemetry-collector-contrib 0.149.0-r0, opentofu-fips 1.10.9-r4, opentofu-fips 1.11.5-r3, opentofu-fips 1.11.6-r0, opentofu-fips 1.7.10-r4, opentofu-fips 1.8.11-r4, opentofu-fips 1.9.4-r4, prometheus 3.5.2:r0, prometheus-fips 3.11.2-r0, tekton-pipelines 1.10.2-r0, tekton-pipelines 1.11.0-r0, tekton-pipelines 1.7.0-r0, tekton-pipelines 1.9.2-r0, tekton-pipelines-fips 1.7.0-r0, tekton-pipelines-fips 1.9.2-r0, tempo 2.7.2-r2, terraform 1.15.1-r1, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.97.2-r5, terragrunt-fips 0.98.0-r5, terragrunt-fips 0.99.5-r0, terragrunt-fips 1.0.1-r1, zot 2.1.13-r2

GHSA-w8rr-5gcm-pp58 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YA15399 Security fix for CVE-2026-33671 applied in: argo-workflows 3.6.19-r8, argo-workflows 3.7.15-r3, argo-workflows 3.7.17-r1, azure-functions-node 4.1052.200-r0, mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r0, renovate 43.123.6-r0, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-33671 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CI51547 Security fix for CVE-2026-33937 applied in: mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2

CVE-2026-33937 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DK08962 Security fix for CVE-2024-45339 applied in: cloudprober 0.11.9-r0, cloudprober-fips 0.12.9-r0, cluster-proportional-autoscaler 1.8.11-r0, ip-masq-agent 2.10.2-r0, ip-masq-agent 2.11.0-r0, ip-masq-agent 2.9.3-r0, step-ca 0.27.5-r0

CVE-2024-45339 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PU59944 Security fix for GHSA-8gq9-2x98-w8hf applied in: pritunl 1.30.3431.73-r1

Security vulnerability affects the pritunl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KS65231 Security fix for CVE-2026-35205 applied in: kumactl 2.13.4-r0

Security vulnerability affects the kumactl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SY10925 Security fix for CVE-2026-35204 applied in: kumactl 2.13.4-r0

Security vulnerability affects the kumactl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PM96717 Security fix for CVE-2026-40179 applied in: amazon-cloudwatch-agent 1.300071.0-r1, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cortex 1.21.0-r0, elastic-beats 8.19.15-r0, elastic-beats 9.2.8-r6, elastic-beats 9.4.0-r1, grafana 12.3.10-r1, grafana 12.4.7-r1, grafana 13.0.5-r1, grafana 13.0.7-r1, helm-operator-fips 1.41.1-r2, istio 1.27.9-r0, istio 1.29.2-r0, istio-fips 1.29.2-r0, istio-fips 1.30.0-r0, istio-pilot-discovery 1.28.3-r1, istio-pilot-discovery-fips 1.28.3-r1, keda 2.19.0-r3, keda-fips 2.18.3-r3, keda-fips 2.19.0-r2, loki 3.6.10-r1, minio-operator-fips 7.1.1-r9, pmm 3.5.0-r0, prometheus-operator 0.69.1-r1, prometheus-operator 0.87.1-r3, prometheus-pushgateway 1.10.0-r1, prometheus-pushgateway-fips 1.10.0-r3, tempo-fips 2.7.2-r0, tempo-fips 2.8.3-r0, tempo-fips 2.9.1-r0

CVE-2026-40179 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QI58975 Security fix for CVE-2026-40175 applied in: jitsucom-jitsu 2.14.0-r1, mongosh 2.8.2-r1, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

CVE-2026-40175 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KS06935 Security fix for GHSA-92mm-2pjq-r785 applied in: atlantis-fips 0.41.0-r0, opentofu-fips 1.10.9-r5, opentofu-fips 1.11.5-r4, opentofu-fips 1.11.6-r0, syft 1.42.4-r0, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.97.2-r5, terragrunt-fips 0.98.0-r5, terragrunt-fips 0.99.5-r0

GHSA-92mm-2pjq-r785 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KB50222 Security fix for CVE-2025-41254 applied in: thingsboard 4.3.0.1-r2

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VH87962 Security fix for CVE-2026-35554 applied in: akhq 0.27.1-r5, apache-nifi 2.7.2-r7, strimzi-kafka-operator 0.50.1-r2, thingsboard 4.3.0.1-r2, wildfly 39.0.1-r0

CVE-2026-35554 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DH42386 Security fix for CVE-2026-25854 applied in: thingsboard 4.3.0.1-r2

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BB54045 Security fix for CVE-2025-66614 applied in: thingsboard 4.3.0.1-r2, thingsboard 4.3.1-r0, tomcat10 10.0.27-r1

CVE-2025-66614 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PO20048 Security fix for GHSA-xgp8-3hg3-c2mh applied in: ztunnel-fips 1.27.8-r4, ztunnel-fips 1.27.9-r0, ztunnel-fips 1.28.5-r1, ztunnel-fips 1.29.1-r1

GHSA-xgp8-3hg3-c2mh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SK45951 Security fix for GHSA-965h-392x-2mh5 applied in: ztunnel-fips 1.27.8-r4, ztunnel-fips 1.27.9-r0, ztunnel-fips 1.28.5-r1, ztunnel-fips 1.29.1-r1

GHSA-965h-392x-2mh5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...