CLEANSTART-2026-BV94239 Security fix for GHSA-w7fw-mjwx-w883 applied in: opensearch-dashboards-fips 3.5.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-w7fw-mjwx-w883 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UE38963 Security fix for GHSA-7h2j-956f-4vf2 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-7h2j-956f-4vf2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BE82466 Security fix for CVE-2026-32141 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-32141 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH50712 Security fix for GHSA-25h7-pfq9-p65f applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-25h7-pfq9-p65f affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VM51396 Security fix for GHSA-2g4f-4pwh-qvx6 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-2g4f-4pwh-qvx6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NS67921 Security fix for CVE-2025-69873 applied in: argo-workflows 3.6.19-r8, mongosh 2.5.10-r5, mongosh 2.6.0-r4, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2025-69873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XN28189 Security fix for GHSA-qpx9-hpmf-5gmw applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-qpx9-hpmf-5gmw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZP55768 Security fix for CVE-2026-27601 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-27601 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LT23543 Security fix for GHSA-23c5-xmqv-rm74 applied in: argo-workflows 3.7.17-r1, mongosh 2.5.10-r3, mongosh 2.6.0-r2, mongosh 2.7.0-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-23c5-xmqv-rm74 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HA54689 Security fix for CVE-2026-27904 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, npm 11.11.0-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-27904 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BZ42078 Security fix for GHSA-7r86-cg39-jmmj applied in: argo-workflows 3.7.17-r1, mongosh 2.5.10-r3, mongosh 2.6.0-r2, mongosh 2.7.0-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-7r86-cg39-jmmj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AQ99839 Security fix for GHSA-72c7-4g63-hpw5 applied in: tekton-chains 0.26.0-r0, tekton-chains-fips 0.26.0-r0

GHSA-72c7-4g63-hpw5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PK76681 Security fix for CVE-2024-36537 applied in: cert-manager-cmctl 2.3.0-r1, cert-manager-cmctl-fips 2.4.0-r2

CVE-2024-36537 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LX31883 Security fix for GHSA-gx3x-vq4p-mhhv applied in: cert-manager-cmctl 2.3.0-r1, cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1

GHSA-gx3x-vq4p-mhhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TV52514 Security fix for CVE-2026-27903 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, npm 11.11.0-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-27903 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZT14752 Security fix for GHSA-fj3w-jwp8-x2g3 applied in: mongosh 2.6.0-r1, opensearch-dashboards-fips 3.5.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-fj3w-jwp8-x2g3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MZ20029 Security fix for CVE-2026-1225 applied in: cassandra 5.0.6-r2, cassandra 5.0.8-r1, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, cassandra-reaper-fips 4.0.1-r1, cassandra-reaper-fips 4.0.2-r1, cassandra-reaper-fips 4.1.1-r1, cloud-config-server 4.3.2-r3, confluent-common-docker 7.6.9-r3, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0, schema-registry 7.7.8-r1, sonarqube 25.12.0.117093-r2, stargate 1.0.90-r4, stargate 2.0.44-r4, thingsboard 4.3.0.1-r2, thingsboard 4.3.1-r0, trino 479-r0

CVE-2026-1225 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DD01525 Security fix for CVE-2026-27942 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-27942 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DN87303 Security fix for GHSA-8gc5-j5rx-235r applied in: kibana 9.3.2-r3, mongosh 2.8.1-r0, opensearch-dashboards-fips 3.5.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-8gc5-j5rx-235r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KO17168 Security fix for CVE-2026-1605 applied in: apache-nifi 2.6.0-r3, apache-nifi 2.7.2-r2, kafka 4.0.1-r2, kafka-fips 3.8.1-r6, kafka-fips 4.0.1-r2, kafka-fips 4.0.2-r1, strimzi-kafka-operator 0.46.1-r3, strimzi-kafka-operator 0.47.0-r2, strimzi-kafka-operator 0.48.0-r1, strimzi-kafka-operator 0.49.1-r0, strimzi-kafka-operator 0.50.1-r0, strimzi-kafka-operator 0.51.0-r0, trino 479-r0

CVE-2026-1605 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RN39734 Security fix for CVE-2020-8911 applied in: aws-flb-cloudwatch 1.9.4-r0, consul-fips 1.22.2-r2, distribution 3.0.0-r0, external-secrets 2.2.0-r0, external-secrets-fips 0.17.0-r1, external-secrets-fips 2.2.0-r0, gostatsd 28.3.0-r2, grafana-mimir 3.0.2-r0, loki 3.6.12-r0, openbao-fips 2.4.4-r4, opentelemetry-collector-contrib-fips 0.144.0-r3, opentofu-fips 1.11.5-r3, opentofu-fips 1.7.10-r4, opentofu-fips 1.8.11-r4, prometheus 2.47.2-r1, prometheus-fips 3.5.0-r4, tigera-operator 1.41.1-r0

CVE-2020-8911 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FQ78730 Security fix for GHSA-jmr7-xgp7-cmfj applied in: jitsucom-jitsu 2.11.0-r2, opensearch-dashboards-fips 3.5.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-jmr7-xgp7-cmfj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HQ50857 Security fix for CVE-2026-33036 applied in: mongosh 2.6.0-r4, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-33036 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SE38317 Security fix for CVE-2020-8912 applied in: aws-flb-cloudwatch 1.9.4-r0, distribution 3.0.0-r0, external-secrets 2.2.0-r0, external-secrets-fips 0.17.0-r1, external-secrets-fips 2.2.0-r0, gostatsd 28.3.0-r2, grafana-mimir 3.0.2-r0, loki 3.6.12-r0, opentelemetry-collector-contrib-fips 0.144.0-r3, opentofu-fips 1.11.5-r3, opentofu-fips 1.7.10-r4, opentofu-fips 1.8.11-r4, prometheus-fips 3.5.0-r4, tigera-operator 1.41.1-r0

CVE-2020-8912 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SD37188 Security fix for CVE-2025-67721 applied in: apache-nifi 2.7.2-r7, hazelcast 5.7.0-r1, spark-sc213-jdk17-py311 4.1.1-r2, trino 479-r0

CVE-2025-67721 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XI72782 Security fix for GHSA-37qj-frw5-hhjh applied in: opensearch-dashboards-fips 3.5.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-37qj-frw5-hhjh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DE27040 Security fix for CVE-2026-26278 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-26278 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HA50090 Security fix for CVE-2026-25128 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-25128 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GZ45856 Security fix for GHSA-m7jm-9gc2-mpf2 applied in: jitsucom-jitsu 2.11.0-r2, opensearch-dashboards-fips 3.5.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-m7jm-9gc2-mpf2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YX43622 Security fix for CVE-2025-67735 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r1, apicurio-registry 3.1.7-r6, cloud-config-server 4.3.2-r3, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kogito-apps 10.1.0-r0, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0, s3proxy 3.3.0-r1, stargate 1.0.90-r4, stargate 2.0.44-r4, strimzi-kafka-operator 0.46.1-r3, strimzi-kafka-operator 0.47.0-r2, strimzi-kafka-operator 0.48.0-r1, wavefront-proxy 13.9-r0

CVE-2025-67735 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HR43614 Security fix for CVE-2026-25896 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-25896 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BE42282 Security fix for CVE-2024-57699 applied in: apicurio-registry 3.1.7-r6

Security vulnerability affects the apicurio-registry package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AL62330 Security fix for CVE-2025-11966 applied in: apicurio-registry 3.1.7-r6, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.4.7-r5, keycloak 26.5.7-r4, kogito-apps 10.1.0-r0

CVE-2025-11966 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MB67132 Security fix for GHSA-g9mf-h72j-4rw9 applied in: jitsucom-jitsu 2.11.0-r2

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FN02943 Security fix for GHSA-r275-fr43-pm7q applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-r275-fr43-pm7q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ES27254 Security fix for CVE-2023-32763 applied in: qt6-qtbase 6.5.0-r5

Security vulnerability affects the qt6-qtbase package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZU43007 Security fix for GHSA-5jpx-9hw9-2fx4 applied in: jitsucom-jitsu 2.11.0-r2

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AL17033 Security fix for CVE-2026-28292 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-28292 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WF23391 Security fix for CVE-2025-11965 applied in: apicurio-registry 3.1.7-r6, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.4.7-r5, keycloak 26.5.7-r4, kogito-apps 10.1.0-r0

CVE-2025-11965 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XN49682 Security fix for CVE-2023-32762 applied in: qt6-qtbase 6.5.0-r5

Security vulnerability affects the qt6-qtbase package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EK29154 Security fix for CVE-2026-1002 applied in: apicurio-registry 3.1.7-r6, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.4.7-r3, keycloak 26.5.6-r5, kogito-apps 10.1.0-r0, spark-sc213-jdk17-py311 4.1.1-r2, strimzi-kafka-operator 0.46.1-r3, strimzi-kafka-operator 0.47.0-r2, strimzi-kafka-operator 0.48.0-r1, strimzi-kafka-operator 0.49.1-r0

CVE-2026-1002 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HJ90952 Security fix for GHSA-h25m-26qc-wcjf applied in: jitsucom-jitsu 2.11.0-r2

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BQ28777 Security fix for GHSA-8wc6-vgrq-x6cf applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-8wc6-vgrq-x6cf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC26569 Security fix for CVE-2025-59250 applied in: apache-hive 4.0.1-r8, apache-hive 4.1.0-r5, apicurio-registry 3.1.7-r6, keycloak 26.3.5-r3, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.3-r3, sonarqube 25.12.0.117093-r2, sonarqube 26.3.0.120487-r3

CVE-2025-59250 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW64102 Security fix for GHSA-m494-w24q-6f7w applied in: apicurio-registry 3.1.7-r6

Security vulnerability affects the apicurio-registry package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JR74440 Security fix for GHSA-9qr9-h5gf-34mp applied in: jitsucom-jitsu 2.11.0-r2

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TD56649 Security fix for GHSA-9g9p-9gw9-jx7f applied in: jitsucom-jitsu 2.11.0-r2

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OP77740 Security fix for GHSA-33vc-wfww-vjfv applied in: jitsucom-jitsu 2.11.0-r2

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MC82995 Security fix for GHSA-968p-4wvh-cqc8 applied in: jitsucom-jitsu 2.11.0-r2

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EL62572 Security fix for GHSA-hfpc-8r3f-gw53 applied in: ntpd-rs 1.6.2-r1, ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.29.1-r0

GHSA-hfpc-8r3f-gw53 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...