CLEANSTART-2026-VH87962 Security fix for CVE-2026-35554 applied in: akhq 0.27.1-r5, apache-nifi 2.7.2-r7, strimzi-kafka-operator 0.50.1-r2, thingsboard 4.3.0.1-r2, wildfly 39.0.1-r0

CVE-2026-35554 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PZ00337 Security fix for CVE-2026-24733 applied in: thingsboard 4.3.0.1-r2, thingsboard 4.3.1-r0

CVE-2026-24733 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TA66488 Security fix for GHSA-pc3f-x583-g7j2 applied in: argo-cd 3.2.7-r2, argo-cd 3.3.5-r0, argo-cd-fips 3.0.23-r1, argo-cd-fips 3.1.14-r0, argo-cd-fips 3.2.9-r0, argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, argo-workflows 3.6.19-r5, cert-manager-cmctl-fips 2.4.0-r3, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.27.3-r3, cloudnative-pg-fips 1.28.1-r3, dynamic-localpv-provisioner 4.3.0-r1, dynamic-localpv-provisioner 4.5.0-r1, dynatrace-operator 1.9.0-r0, flux-notification-controller-fips 1.5.0-r0, gitlab-runner 18.11.1-r0, helm 4.0.5-r2, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, istio 1.27.9-r0, istio 1.28.5-r3, istio-fips 1.25.5-r5, istio-fips 1.26.8-r2, istio-fips 1.27.8-r3, istio-fips 1.27.9-r0, istio-fips 1.28.5-r3, istio-fips 1.30.0-r0, istio-pilot-discovery 1.28.3-r1, istio-pilot-discovery-fips 1.28.3-r1, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r1, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, k8ssandra-client-fips 0.5.0-r10, k8ssandra-client-fips 0.6.4-r8, k8ssandra-client-fips 0.7.0-r6, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.11-r0, kubernetes 1.34.1-r4, kubernetes 1.35.3-r2, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubevela 1.10.8-r0, kured 1.20.0-r0, linkerd2 26.1.4-r0, linkerd2 26.4.2, percona-server-mongodb-operator 1.22.0-r1, percona-xtradb-cluster-operator 1.19.1-r0, percona-xtradb-cluster-operator-fips 1.16.1-r1, percona-xtradb-cluster-operator-fips 1.17.0-r0, percona-xtradb-cluster-operator-fips 1.18.0-r4, percona-xtradb-cluster-operator-fips 1.19.1-r0, postgres-operator 1.12.2-r2, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-cluster-operator 2.20.0-r1, tigera-operator 1.41.1-r0, timoni 0.25.2-r0, velero-fips 1.17.2-r6, velero-fips 1.18.0-r2

GHSA-pc3f-x583-g7j2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QB24702 Security fix for CVE-2025-5115 applied in: schema-registry 7.7.8-r0, schema-registry 7.9.6-r0, solr 9.8.1-r1

CVE-2025-5115 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VL17238 Security fix for CVE-2026-33815 applied in: argo-workflows 4.0.4-r1, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.27.3-r3, cloudnative-pg-fips 1.28.1-r3, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r1, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, keda 2.19.0-r3, keda-fips 2.18.3-r3, kube-bench 0.15.0-r0, openbao-fips 2.3.2-r6, openbao-fips 2.4.4-r6, step 0.29.0-r0, step 0.30.2-r1, step-cli 0.27.5-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, temporal 1.5.1-r0, temporal-server 1.29.6-r0, temporal-server 1.30.4-r0, temporal-server 1.31.0.153.3-r0, temporal-server-fips 1.29.6-r0, temporal-server-fips 1.31.0.153.1-r0

CVE-2026-33815 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HU95465 Security fix for CVE-2026-33813 applied in: gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, mailpit 1.29.6-r0, mailpit 1.29.7-r1, mailpit-fips 1.29.6-r0, mailpit-fips 1.29.7-r1, ollama 0.20.3-r1, ollama 0.30.10-r0, ollama 0.31.2-r2, ollama 0.32.11-r3, ollama-fips 0.18.3-r0, ollama-fips 0.21.0-r0, ollama-fips 0.30.11-r1, ollama-fips 0.32.11-r2, ollama-fips 0.32.9-r1

CVE-2026-33813 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZH25873 Security fix for CVE-2026-22695 applied in: apache-zookeeper 3.7.2-r4

Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RU81320 Security fix for CVE-2026-33252 applied in: gptscript 0.9.8-r0

Security vulnerability affects the gptscript package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AX54814 Security fix for CVE-2025-11579 applied in: gptscript 0.6.0-r0, gptscript 0.7.1-r0, gptscript 0.8.5-r0, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r0, grafana-alloy 1.16.0-r0, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0

CVE-2025-11579 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QM33219 Security fix for GHSA-37ch-88jc-xwx2 applied in: sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

GHSA-37ch-88jc-xwx2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OD19905 Security fix for CVE-2026-34043 applied in: argo-workflows 3.6.19-r8, argo-workflows 3.7.15-r3, opensearch-dashboards-fips 2.19.5-r0

CVE-2026-34043 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QJ20877 Security fix for CVE-2026-4878 applied in: grafana-alloy 1.15.0-r2

Security vulnerability affects the grafana-alloy package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GJ80180 Security fix for CVE-2026-42037 applied in: jitsucom-jitsu 2.14.0-r1, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

CVE-2026-42037 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OG82185 Security fix for CVE-2026-35213 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

CVE-2026-35213 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UO65217 Security fix for CVE-2026-42587 applied in: apache-activemq-artemis 2.56.0-r1, apache-nifi 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, elasticsearch 9.2.7-r0, elasticsearch 9.2.8-r0, elasticsearch 9.3.7-r0, elasticsearch 9.4.3-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, strimzi-kafka-operator 1.1.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42587 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CO31185 Security fix for CVE-2019-2766 applied in: openjdk8 8.222.10-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JE09938 Security fix for CVE-2020-14796 applied in: openjdk8 8.272.10-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MK68807 Security fix for CVE-2020-14621 applied in: openjdk8 8.272.10-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IZ83531 Security fix for CVE-2022-21299 applied in: openjdk8 8.322.06-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VY43131 Security fix for CVE-2026-39833 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300066.1-r1, apko 1.2.13-r0, apko 1.2.2-r2, argo-cd 3.3.5-r1, argo-cd-fips 3.1.14-r2, argo-workflows 4.0.5-r0, authservice 1.1.5-r1, authservice 1.1.6-r1, cadvisor 0.55.1-r1, cadvisor 0.57.0-r0, cadvisor-fips 0.55.1-r0, calico 3.30.7-r2, cert-manager 1.17.4-r2, cert-manager 1.18.6-r1, cert-manager 1.20.0-r0, cert-manager 1.20.2-r0, cert-manager-webhook-pdns-fips 2.5.5-r1, cfssl 1.5.0-r1, cluster-autoscaler 1.35.2-r2, consul 2.0.1-r0, cortex 1.21.0-r2, cosign 3.0.6-r1, crossplane-provider-sql-fips 0.15.0-r3, dex 2.42.1-r4, dynatrace-operator 1.6.3-r1, elastic-beats 8.19.15-r5, elastic-beats 9.2.8-r2, elastic-beats-fips 9.2.8-r0, external-secrets-fips 0.17.0-r2, external-secrets-operator 2.5.0-r1, flux-notification-controller-fips 1.5.0-r0, forecastle 1.0.159-r1, fulcio-fips 1.7.1-r3, gostatsd 28.3.0-r2, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, haproxy-ingress 0.14.12-r1, helm 4.0.5-r2, helm-operator 1.42.2-r0, istio 1.28.5-r3, istio 1.29.2-r1, istio-fips 1.26.8-r4, istio-fips 1.27.9-r2, istio-fips 1.30.0-r1, kube-rbac-proxy 0.20.2-r2, kube-rbac-proxy 0.21.2-r0, kube-rbac-proxy-fips 0.20.2-r2, kube-state-metrics 2.10.1-r2, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.1.0-r1, kubernetes 1.36.1-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r4, kubernetes-csi-external-provisioner-fips 6.2.1-r3, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-csi-external-snapshotter-fips 8.4.0-r4, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, local-static-provisioner 2.8.0-r2, melange 0.50.0-r1, melange 0.56.1-r1, memcached-exporter 0.16.0-r0, minio 0.20260330.001845-r0, minio-client 0.20250721.052808-r1, minio-operator 7.1.1-r4, mongodb 7.0.32-r1, mongodb 8.0.20-r1, mongodb 8.0.21-r1, mongodb 8.2.6-r1, mongodb 8.3.2-r1, ollama 0.20.3-r2, ollama 0.31.2-r2, ollama 0.32.11-r2, ollama-fips 0.32.11-r2, opa 1.17.0-r1, percona-server-mongodb-operator 1.22.0-r1, percona-server-mongodb-operator 1.23.0-r0, policy-controller-fips 0.15.1-r1, postgres-operator 1.12.2-r2, postgres-operator 1.15.1-r1, prometheus 3.11.2-r0, prometheus 3.5.2-r1, prometheus-alertmanager 0.32.0-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mysqld-exporter 0.15.0-r3, prometheus-node-exporter-fips 1.11.1-r1, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway 1.11.3-r1, prometheus-pushgateway 1.8.0-r1, prometheus-pushgateway 1.9.0-r1, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r1, prometheus-pushgateway-fips 1.8.0-r2, prometheus-redis-exporter-fips 1.84.0-r0, prometheus-redis-exporter-fips 1.87.0-r3, promxy-fips 0.0.93-r1, pulumi-kubernetes-operator 2.7.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rancher-fleet-agent 0.12.17-r3, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r3, rancher-fleet-agent 0.15.4-r3, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, rclone 1.69.0-r3, restic-fips 0.18.1-r7, rundeck 6.0.0-r0, sealed-secrets 0.34.0-r0, sealed-secrets 0.35.0-r4, sealed-secrets 0.36.6-r1, secrets-store-csi-driver-provider-gcp 1.15.0-r1, secrets-store-csi-driver-provider-gcp 1.17.0-r2, spire-server 1.13.5-r1, spire-server 1.14.5-r1, spire-server-fips 1.14.5-r1, step-ca-fips 0.30.2-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, syft 1.45.0-r2, tempo 2.10.4-r1, temporal 1.5.1-r0, temporal-server 1.31.0.153.1-r0, temporal-ui-server-fips 2.51.1-r1, terraform 1.14.8-r2, tigera-operator-fips 1.37.2-r4, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.45.0-r1, trust-manager-fips 0.20.3-r2, trust-manager-fips 0.21.1-r2, vault 1.20.4-r5, vault 1.21.4-r5, vault 2.0.0-r1, vault-k8s 1.7.4-r0, velero 1.18.1-r0, velero-fips 1.18.2-r6, weaviate 1.37.4-r1, weaviate 1.37.6-r1, weaviate-fips 1.36.17-r0, weaviate-fips 1.37.9-r0, weaviate-fips 1.38.1-r0

CVE-2026-39833 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WY38697 Security fix for CVE-2026-3219 applied in: k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, python3 3.12.13-r0

CVE-2026-3219 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YF91950 Security fix for GHSA-m7cr-m3pv-hgrp applied in: apko 1.2.13-r0, argo-cd 3.1.16-r1, argo-cd 3.2.12-r0, argo-cd 3.2.7-r3, argo-cd 3.3.11-r0, argo-cd 3.3.5-r2, argo-cd-fips 3.1.14-r2, argo-events 1.9.10-r1, argo-workflows 4.0.5-r0, argo-workflows-fips 4.0.6-r1, external-secrets-fips 0.17.0-r2, kubevela 1.10.8-r0, kyverno 1.18.1-r2, pulumi-kubernetes-operator 2.7.0-r0

GHSA-m7cr-m3pv-hgrp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CF01262 Security fix for CVE-2026-25681 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300066.1-r1, apache-nifi 2.10.0-r4, apko 1.2.13-r0, argo-cd 3.2.7-r3, argo-cd 3.3.5-r2, argo-workflows 4.0.5-r0, authservice 1.1.5-r1, authservice 1.1.6-r1, aws-load-balancer-controller 3.2.0-r0, aws-network-policy-agent 1.3.2-r1, aws-network-policy-agent-fips 1.3.2-r0, cadvisor 0.55.1-r1, cadvisor 0.57.0-r0, cadvisor-fips 0.55.1-r0, cert-manager 1.17.4-r2, cert-manager 1.18.6-r1, cert-manager 1.20.0-r0, cert-manager 1.20.2-r0, cert-manager-webhook-pdns-fips 2.5.5-r1, cfssl 1.5.0-r1, cloudnative-pg 1.29.1-r0, cloudnative-pg 1.29.1-r2, cloudprober 0.14.3-r1, cluster-autoscaler 1.35.2-r2, consul 2.0.1-r0, cortex 1.21.0-r2, cosign 3.0.6-r1, dex 2.42.1-r4, dex 2.44.0-r3, dex 2.45.1-r3, dynatrace-operator 1.6.3-r1, elastic-beats 9.2.8-r2, elastic-beats-fips 9.2.8-r0, external-secrets-fips 0.17.0-r2, external-secrets-operator 2.5.0-r1, external-secrets-operator 2.6.0-r1, fluent-operator 3.9.0-r2, flux-notification-controller-fips 1.5.0-r0, forecastle 1.0.159-r1, fulcio-fips 1.7.1-r3, gostatsd 28.3.0-r2, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, grafana-org-operator 1.13.0-r0, haproxy-ingress 0.14.12-r1, helm 4.0.5-r2, helm-operator 1.42.2-r0, ingress-nginx-controller 1.14.5-r1, istio 1.29.2-r1, istio-fips 1.26.8-r4, istio-fips 1.27.9-r2, istio-fips 1.28.7-r0, istio-fips 1.30.0-r1, k8ssandra-operator 1.26.0-r0, kube-bench 0.15.0-r1, kube-rbac-proxy 0.20.2-r2, kube-rbac-proxy 0.21.2-r0, kube-rbac-proxy-fips 0.20.2-r2, kube-state-metrics 2.10.1-r2, kube-state-metrics 2.15.0-r2, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.1.0-r1, kuberay-operator 1.3.2-r3, kuberay-operator 1.4.2-r3, kuberay-operator 1.5.2-r3, kuberay-operator 1.6.2-r2, kubernetes 1.36.1-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r4, kubernetes-csi-external-provisioner-fips 6.2.1-r3, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-csi-external-snapshotter-fips 8.4.0-r4, kubernetes-csi-livenessprobe-fips 2.19.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r1, kubernetes-csi-node-driver-registrar-fips 2.15.0-r5, kubernetes-csi-node-driver-registrar-fips 2.16.0-r4, kubernetes-dashboard-metrics-scraper 1.2.2-r2, kubernetes-dashboard-metrics-scraper-fips 1.2.2-r1, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, kubevela 1.10.8-r0, kubewatch 2.12.0-r1, kured 1.20.0-r0, kyverno 1.18.1-r1, local-path-provisioner 0.0.36-r1, local-path-provisioner-fips 0.0.36-r1, local-static-provisioner 2.8.0-r2, lvm-driver 1.10.0-r4, melange 0.50.0-r1, melange 0.56.1-r1, memcached-exporter 0.16.0-r0, metacontroller 4.12.13-r1, metacontroller 4.13.1-r1, metacontroller 4.14.0-r1, metacontroller 4.15.0-r1, metallb 0.16.1-r0, metallb 0.16.1-r1, minio-client 0.20250721.052808-r1, mongodb 7.0.32-r1, mongodb 8.0.20-r1, mongodb 8.0.21-r1, mongodb 8.2.6-r1, mongodb 8.3.2-r1, mountpoint-s3-csi-driver 2.3.0-r1, newrelic-infrastructure-agent 1.73.1-r1, newrelic-nri-kube-events 2.16.4-r2, ollama 0.20.3-r3, ollama 0.31.2-r2, ollama 0.32.11-r2, ollama-fips 0.32.11-r2, opa 1.17.0-r1, percona-server-mongodb-operator 1.22.0-r1, percona-server-mongodb-operator 1.23.0-r0, percona-xtradb-cluster-operator-fips 1.18.0-r5, policy-controller-fips 0.15.1-r1, postgres-operator 1.12.2-r2, postgres-operator 1.15.1-r1, prometheus 3.11.2-r0, prometheus 3.5.2-r1, prometheus-alertmanager 0.32.0-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mysqld-exporter 0.15.0-r3, prometheus-node-exporter-fips 1.11.1-r1, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway 1.8.0-r2, prometheus-pushgateway 1.9.0-r1, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r1, prometheus-pushgateway-fips 1.8.0-r2, promxy-fips 0.0.93-r1, pulumi-kubernetes-operator 2.7.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rabbitmq-messaging-topology-operator 1.19.2-r0, rancher-fleet-agent 0.12.17-r3, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r3, rancher-fleet-agent 0.15.4-r3, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, restic-fips 0.18.1-r7, runc 1.4.2-r0, rundeck 6.0.0-r0, sealed-secrets 0.34.0-r0, sealed-secrets 0.35.0-r4, sealed-secrets 0.36.6-r1, secrets-store-csi-driver-provider-gcp 1.15.0-r1, secrets-store-csi-driver-provider-gcp 1.17.0-r2, smarter-device-manager 1.1.2-r0, spire-server 1.13.5-r1, spire-server 1.14.5-r1, spire-server-fips 1.14.5-r1, stakater-reloader 1.2.1-r0, step 0.30.2-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, syft 1.45.0-r2, tempo 2.10.4-r1, temporal 1.5.1-r0, temporal-server 1.31.0.153.1-r0, temporal-ui-server-fips 2.51.1-r1, tigera-operator 1.42.0-r0, tigera-operator-fips 1.37.2-r4, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.45.0-r1, trust-manager 0.22.1-r2, trust-manager-fips 0.20.3-r2, trust-manager-fips 0.21.1-r2, vault 1.20.4-r5, vault 1.21.4-r5, vault 2.0.0-r1, vault-k8s 1.7.4-r0, velero 1.18.1-r0, velero-plugin-for-aws 1.12.2-r6, velero-plugin-for-aws 1.14.1-r1, velero-plugin-for-aws-fips 1.13.2-r1, velero-plugin-for-aws-fips 1.14.2-r1, velero-plugin-for-gcp-fips 1.14.1-r1, victoriametrics-operator 0.69.0-r1, wave 0.11.0-r2, weaviate 1.37.4-r1, weaviate 1.37.6-r1, weaviate-fips 1.36.17-r0, weaviate-fips 1.37.9-r0, weaviate-fips 1.38.1-r0, whereabouts 0.9.2-r2, yunikorn-k8shim 1.5.2-r1

CVE-2026-25681 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OV69039 Security fix for CVE-2026-33223 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YJ62834 Security fix for CVE-2026-33219 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MU61112 Security fix for CVE-2024-51744 applied in: minio-operator 6.0.4-r5, prometheus 2.47.2-r0, velero-plugin-for-csi 0.6.3-r1

CVE-2024-51744 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WC65057 Security fix for GHSA-v9wx-v5z4-wgfj applied in: kube-logging-operator 6.2.2-r0

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RP32633 Security fix for CVE-2020-10543 applied in: perl 5.30.3-r0

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZY99559 Security fix for CVE-2023-47038 applied in: perl 5.38.1-r0

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SN47356 Security fix for CVE-2026-46599 applied in: gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, ollama 0.20.3-r4, ollama 0.31.2-r2, ollama 0.32.11-r3, ollama-fips 0.18.3-r2, ollama-fips 0.21.0-r3, ollama-fips 0.32.11-r2, ollama-fips 0.32.9-r1

CVE-2026-46599 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VR22153 Security fix for CVE-2023-39325 applied in: cfssl 1.5.0-r1, wavefront-collector-for-kubernetes 1.13.0-r0, zookeeper-operator 0.2.15-r1

CVE-2023-39325 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DM54086 Security fix for CVE-2024-27289 applied in: wavefront-collector-for-kubernetes 1.13.0-r0

Security vulnerability affects the wavefront-collector-for-kubernetes package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EE99058 Security fix for CVE-2026-23881 applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r7

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EY15087 Security fix for GHSA-m7wr-2xf7-cm9p applied in: wavefront-collector-for-kubernetes 1.13.0-r0

Security vulnerability affects the wavefront-collector-for-kubernetes package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CD10863 Security fix for CVE-2026-45674 applied in: apache-hive 4.2.0-r5, apache-nifi 2.9.0-r1, elasticsearch 9.2.7-r0, elasticsearch 9.2.8-r0, elasticsearch 9.3.5-r2, elasticsearch 9.3.7-r0, elasticsearch 9.4.3-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.7-r1, keycloak 26.6.3-r2, s3proxy 3.3.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-45674 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OD16430 Security fix for CVE-2024-45310 applied in: runc 1.1.14-r0

Security vulnerability affects the runc package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TN41416 Security fix for CVE-2026-41205 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, apache-superset 5.0.0-r7

CVE-2026-41205 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RN39898 Security fix for CVE-2024-56326 applied in: airflow-2 2.10.3-r2

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KG57806 Security fix for CVE-2025-58065 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.0.6-r1

CVE-2025-58065 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WU08631 Security fix for CVE-2025-69225 applied in: airflow-2 2.10.3-r2, kserve-storage-controller 0.19.0-r0

CVE-2025-69225 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SC74702 Security fix for CVE-2025-69229 applied in: airflow-2 2.10.3-r2, kserve-storage-controller 0.19.0-r0

CVE-2025-69229 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OU64383 Security fix for CVE-2025-69223 applied in: airflow-2 2.10.3-r2, kserve-storage-controller 0.19.0-r0

CVE-2025-69223 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GV24455 Security fix for GHSA-mf9w-mj56-hr94 applied in: airflow-2 2.10.3-r2, apache-superset 5.0.0-r7

GHSA-mf9w-mj56-hr94 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JF27043 Security fix for GHSA-pq67-6m6q-mj2v applied in: airflow-2 2.10.3-r2

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DG23203 Security fix for GHSA-cpwx-vrp4-4pq7 applied in: airflow-2 2.10.3-r2

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IX62843 Security fix for CVE-2026-33190 applied in: coredns 1.14.2-r1, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, kubernetes-dns-node-cache-fips 1.26.0-r1

CVE-2026-33190 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UE72338 Security fix for GHSA-q2x7-8rv6-6q7h applied in: airflow-2 2.10.3-r2

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OH68688 Security fix for CVE-2026-33936 applied in: airflow-2 2.11.2-r1

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UF42404 Security fix for GHSA-cj8j-37rh-8475 applied in: apache-nifi 2.9.0-r0, apache-nifi-registry 2.9.0-r0, wildfly 39.0.1-r0

GHSA-cj8j-37rh-8475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FA26777 Security fix for CVE-2026-48096 applied in: grafana 12.2.10-r1, grafana 12.3.10-r1, pmm 3.5.0-r0

CVE-2026-48096 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...