CLEANSTART-2026-NJ87139 vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device

Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. See references for individual vulnerability details...

CLEANSTART-2026-KA88072 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer

CVE-2026-56851 affects multiple packages. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer. See references for individual vulnerability details...

CLEANSTART-2026-EU28747 mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS

Security vulnerability affects the external-secrets-operator-fips package. The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS...

CLEANSTART-2026-DW89349 pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE

Security vulnerability affects the apache-hive package. pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE...

CLEANSTART-2026-QQ38336 Due to an incomplete fix to CVE-2022-31629 https://github

Security vulnerability affects the php package. Due to an incomplete fix to CVE-2022-31629 https://github...

CLEANSTART-2026-LW45744 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the minio-operator package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

CLEANSTART-2026-MR78444 UTF8DataInputJsonParser

Security vulnerability affects the apache-nifi package. UTF8DataInputJsonParser...

CLEANSTART-2026-SA35538 OpenTelemetry-Go is the Go implementation of OpenTelemetry

CVE-2026-81870 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-OZ64651 ftp and scp tasks of Apache Ant can download files from a remote server

CVE-2026-78254 affects multiple packages. The ftp and scp tasks of Apache Ant can download files from a remote server. See references for individual vulnerability details...

CLEANSTART-2026-HP97605 flaw was found in the RoleContainerResource component of Keycloak

Security vulnerability affects the keycloak package. A flaw was found in the RoleContainerResource component of Keycloak...

CLEANSTART-2026-KP79659 Netty versions 4

CVE-2026-89044 affects multiple packages. Netty versions 4. See references for individual vulnerability details...

CLEANSTART-2026-UO04337 Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to a denial of service attack when parsing policies...

Security vulnerability affects the wildfly package. Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to a denial of service attack when parsing policies due to runtime memory exhaustion...

CLEANSTART-2026-GK32867 Security fix for CVE-2026-1703 applied in: k8s-sidecar 1.25.2-r0, kubernetes-csi-driver-nfs-fips 4.13.0-r0, python3 3.11.14-r0, python3 3.12.12-r0

CVE-2026-1703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TP15502 Security fix for CVE-2022-43551 applied in: curl 7.87.0-r0

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PJ45513 Security fix for CVE-2026-73420 applied in: langfuse-worker 3.194.1-r1, langfuse-worker 3.212.0-r1, langfuse-worker 3.213.0-r1, langfuse-worker 3.214.0-r1, langfuse-worker 3.215.0-r1, langfuse-worker 3.216.0-r1, langfuse-worker 3.217.0-r1, langfuse-worker 3.218.0-r1, langfuse-worker 3.219.0-r1, langfuse-worker 3.220.0-r1, langfuse-worker 3.221.1-r2, langfuse-worker 3.223.0-r2

CVE-2026-73420 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EV98830 Security fix for CVE-2026-59276 applied in: apache-nifi 2.10.0-r8

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GV10052 Security fix for CVE-2026-76816 applied in: trino 480-r11

Security vulnerability affects the trino package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OE08543 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures

Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...

CLEANSTART-2026-HZ27786 Security fixes in rekor-backfill-index 1.2.2-r0

Package rekor-backfill-index version 1.2.2-r0 fixes 7 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2024-6104, ghsa-pmwq-pjrm-6p5r, CVE-2026-2303...

CLEANSTART-2026-HY79895 Security fixes in langfuse-worker 3.225.0-r1

Package langfuse-worker version 3.225.0-r1 fixes 11 vulnerabilities: CVE-2026-18446, CVE-2026-69192, CVE-2026-54272, CVE-2026-69198, ghsa-f88m-g3jw-g9cj...

CLEANSTART-2026-EJ32730 Security fixes in langfuse-worker 3.220.0-r1

Package langfuse-worker version 3.220.0-r1 fixes 29 vulnerabilities: ghsa-frvp-7c67-39w9, ghsa-p63j-vcc4-9vmv, ghsa-55q2-fjhq-7xh7, ghsa-c2j3-45gr-mqc4, CVE-2026-69192...

CLEANSTART-2026-IB62904 Security fixes in temporal-server 1.28.4-r2

Package temporal-server version 1.28.4-r2 fixes 15 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...

CLEANSTART-2026-GU39170 Security fixes in amazon-cloudwatch-agent 1.300070.0-r1

Package amazon-cloudwatch-agent version 1.300070.0-r1 fixes 37 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-BT15862 Security fixes in ollama-fips 0.30.11-r2

Package ollama-fips version 0.30.11-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-LZ84634 Security fixes in cloudprober-fips 0.14.3-r2

Package cloudprober-fips version 0.14.3-r2 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-EX36838 Security fixes in airflow-3 3.3.0-r2

Package airflow-3 version 3.3.0-r2 fixes 7 vulnerabilities: CVE-2026-69244, CVE-2026-59881, CVE-2026-69243, CVE-2026-69247, CVE-2026-69249...

CLEANSTART-2026-NP91579 Security fixes in consul-fips 2.0.1-r1

Package consul-fips version 2.0.1-r1 fixes 7 vulnerabilities: CVE-2026-39828, CVE-2026-39829, ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CLEANSTART-2026-UB39790 Security fixes in thingsboard 4.3.1.3-r6

Package thingsboard version 4.3.1.3-r6 fixes 4 vulnerabilities: CVE-2026-59869, ghsa-52cp-r559-cp3m, ghsa-h67p-54hq-rp68, CVE-2026-53550...

CLEANSTART-2026-IT62249 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r0

Package rabbitmq-messaging-topology-operator version 1.16.0-r0 fixes 55 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

CLEANSTART-2026-FE38987 Security fixes in schema-registry 8.1.2-r0

Package schema-registry version 8.1.2-r0 fixes 5 vulnerabilities: CVE-2025-12383, CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480...

CLEANSTART-2026-VV11972 Security fixes in opensearch-k8s-operator-fips 2.5.1-r0

Package opensearch-k8s-operator-fips version 2.5.1-r0 fixes 3 vulnerabilities: CVE-2025-47907, CVE-2025-0913, CVE-2025-4673...

CLEANSTART-2026-MI80072 Security fixes in distribution 3.0.0-r0

Package distribution version 3.0.0-r0 fixes 3 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-DM31887 Security fixes in patch 2.7.6-r4

Package patch version 2.7.6-r4 fixes 1 vulnerabilities: CVE-2018-6952...

CLEANSTART-2026-DV46415 Security fixes in apache-hive 4.0.1-r5

Package apache-hive version 4.0.1-r5 fixes 11 vulnerabilities: CVE-2025-41242, CVE-2025-48924, CVE-2026-22745, CVE-2026-40563, CVE-2026-41603...

CLEANSTART-2026-IP10413 Security fixes in argo-cd 3.4.4-r0

Package argo-cd version 3.4.4-r0 fixes 4 vulnerabilities: CVE-2026-48978, CVE-2026-50162, CVE-2026-50151, ghsa-vh4v-2xq2-g5cg...

CLEANSTART-2026-RM20844 Security fixes in cloud-config-server 4.3.4-r0

Package cloud-config-server version 4.3.4-r0 fixes 15 vulnerabilities: CVE-2026-41293, CVE-2026-43512, CVE-2026-43515, CVE-2026-41284, CVE-2026-42498...

CLEANSTART-2026-BM82881 Security fixes in argo-cd 3.1.16-r0

Package argo-cd version 3.1.16-r0 fixes 4 vulnerabilities: CVE-2026-44973, CVE-2026-44740, ghsa-qw64-3x98-g7q2, ghsa-m3xc-h892-ggx6...

CLEANSTART-2026-AB44357 Security fixes in opentofu-fips 1.9.4-r6

Package opentofu-fips version 1.9.4-r6 fixes 13 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...

CLEANSTART-2026-DU91770 Security fixes in tigera-operator 1.41.1-r0

Package tigera-operator version 1.41.1-r0 fixes 34 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-27143, CVE-2026-33186, CVE-2026-39820, CVE-2026-25679...

CLEANSTART-2026-YS49357 Security fixes in cloud-config-server 4.3.2-r2

Package cloud-config-server version 4.3.2-r2 fixes 15 vulnerabilities: CVE-2026-41293, CVE-2026-43512, CVE-2026-43515, CVE-2026-41284, CVE-2026-42498...

CLEANSTART-2026-YD42613 Security fixes in sonarqube 25.12.0.117093-r1

Package sonarqube version 25.12.0.117093-r1 fixes 1 vulnerabilities: CVE-2026-42198...

CLEANSTART-2026-KI68145 Security fixes in cloudnative-pg 1.26.3-r1

Package cloudnative-pg version 1.26.3-r1 fixes 10 vulnerabilities: ghsa-xgrm-4fwx-7qm8, ghsa-9jj7-4m8r-rfcm, CVE-2026-33815, CVE-2026-33816, ghsa-j88v-2chj-qfwx...

CLEANSTART-2026-QO08875 Security fixes in kubernetes-dns-node-cache-fips 1.26.7-r1

Package kubernetes-dns-node-cache-fips version 1.26.7-r1 fixes 3 vulnerabilities: ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-ZY97357 Security fixes in cloudprober-fips 0.13.9-r0

Package cloudprober-fips version 0.13.9-r0 fixes 8 vulnerabilities: CVE-2026-34986, ghsa-9jj7-4m8r-rfcm, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-SE63944 Security fixes in percona-xtradb-cluster-operator-fips 1.19.0-r1

Package percona-xtradb-cluster-operator-fips version 1.19.0-r1 fixes 3 vulnerabilities: ghsa-gx3x-vq4p-mhhv, CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-OT89777 Security fixes in druid-exporter-fips 0.11-r0

Package druid-exporter-fips version 0.11-r0 fixes 4 vulnerabilities: CVE-2023-45142, CVE-2023-25151, CVE-2022-21698, CVE-2022-29526...

CLEANSTART-2026-ZU41550 Security fixes in elastic-beats 9.3.7-r0

Package elastic-beats version 9.3.7-r0 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-WV49336 Security fixes in prom-mysqld-exporter-fips 0.18.0-r0

Package prom-mysqld-exporter-fips version 0.18.0-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-MS62111 Security fixes in clamav 0.103.2-r0

Package clamav version 0.103.2-r0 fixes 3 vulnerabilities: CVE-2021-1405, CVE-2021-1404, CVE-2021-1252...

CLEANSTART-2026-ME41456 Security fixes in opentofu-fips 1.9.4-r0

Package opentofu-fips version 1.9.4-r0 fixes 5 vulnerabilities: ghsa-hcg3-q754-cr77, ghsa-mh63-6h87-95cp, ghsa-c6gw-w398-hv78, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw...