CLEANSTART-2026-ZW90347 Security fix for CVE-2026-33175 applied in: jupyterhub-k8s-hub 4.3.2-r2

Security vulnerability affects the jupyterhub-k8s-hub package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WX65723 Security fix for CVE-2026-34052 applied in: jupyterhub-k8s-hub 4.3.2-r2

Security vulnerability affects the jupyterhub-k8s-hub package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RV30467 Security fix for CVE-2026-44431 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r3, airflow-3 3.2.0-r0, apache-superset 5.0.0-r7, az 2.83.0-r1, az 2.84.0-r2, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, jupyterhub-k8s-hub 4.3.2-r3, jupyterhub-k8s-hub 4.3.3-r0, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, py3-jupyterhub 5.4.4-r0, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-44431 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WH98389 Security fix for CVE-2026-44432 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r3, airflow-3 3.2.0-r0, apache-superset 5.0.0-r7, az 2.83.0-r1, az 2.84.0-r2, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, jupyterhub-k8s-hub 4.3.2-r3, jupyterhub-k8s-hub 4.3.3-r0, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, py3-jupyterhub 5.4.4-r0, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-44432 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OE48815 Security fix for GHSA-v8jm-5vwx-cfxm applied in: opensearch-dashboards-fips 3.5.0-r1

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NK46628 Security fix for CVE-2026-34743 applied in: cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.26.3-r3, prometheus-redis-exporter-fips 1.78.0-r5, prometheus-redis-exporter-fips 1.79.0-r5, prometheus-redis-exporter-fips 1.81.0-r2, prometheus-redis-exporter-fips 1.82.0-r2, velero-plugin-for-aws 1.12.2-r5

CVE-2026-34743 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FX70874 Security fix for CVE-2026-41889 applied in: certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, keda 2.17.2-r2, keda 2.19.0-r3, keda-fips 2.18.3-r3, kube-bench 0.15.0-r1, openbao-fips 2.5.4-r0, spire-server 1.14.7-r0, spire-server 1.15.0-r1, spire-server-fips 1.14.5-r1, step 0.29.0-r0, step-cli 0.27.5-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, temporal 1.5.1-r0, vault 1.20.4-r4, vault 1.21.4-r4

CVE-2026-41889 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HH65260 Security fix for GHSA-v3rj-xjv7-4jmq applied in: renovate 43.123.6-r0

Security vulnerability affects the renovate package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XC94160 Security fix for GHSA-xq3m-2v4x-88gg applied in: kibana 9.3.2-r3, renovate 43.123.6-r0

GHSA-xq3m-2v4x-88gg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DB48135 Security fix for CVE-2026-44503 applied in: airflow-2 2.10.3-r0, airflow-2 2.11.0-r2, airflow-3 3.0.6-r1, airflow-3 3.1.6-r2, vault 1.20.4-r4, vault 1.21.4-r4, vault 2.0.0-r1

CVE-2026-44503 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VZ99865 Security fix for GHSA-7j59-v9qr-6fq9 applied in: airflow-2 2.10.3-r0, airflow-2 2.11.0-r2, airflow-3 3.1.6-r2, vault 1.20.4-r4, vault 1.21.4-r4, vault 2.0.0-r1

GHSA-7j59-v9qr-6fq9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RB54563 Security fix for GHSA-cbdj-484d-3x9q applied in: keycloak 26.5.0-r2

Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WR37412 Security fix for GHSA-jc7h-c423-mpjc applied in: cassandra-reaper-fips 3.6.1-r0

Security vulnerability affects the cassandra-reaper-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JS30109 Security fix for GHSA-hffm-xvc3-vprc applied in: renovate 43.123.8-r2

Security vulnerability affects the renovate package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XH29578 Security fix for CVE-2026-6951 applied in: renovate 43.123.8-r2

Security vulnerability affects the renovate package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CL78657 Security fix for GHSA-2c5c-chwr-9hqw applied in: opensearch 3.6.0-r4

Security vulnerability affects the opensearch package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HJ29547 Security fix for GHSA-6fmv-xxpf-w3cw applied in: confluent-kafka 8.2.0-r1, kafka 4.0.1-r4, kafka 4.0.1-r5, kafka-fips 3.8.1-r9, kafka-fips 4.0.2-r1, maven 3.8.9-r2, maven 3.9.12-r0, maven 3.9.7-r1

GHSA-6fmv-xxpf-w3cw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WY81634 Security fix for GHSA-c4qc-4q9p-m9q9 applied in: cassandra-reaper-fips 3.6.1-r3

Security vulnerability affects the cassandra-reaper-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XU58754 Security fix for CVE-2026-23901 applied in: activemq 6.1.8-r1, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.8.0-r9

CVE-2026-23901 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KM03146 Security fix for GHSA-qccp-gfcp-xxvc applied in: airflow-2 2.10.3-r2, airflow-3 3.1.8-r3, apache-superset 5.0.0-r7, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, tensorflow-gpu-jupyter 2.21.0-r5

GHSA-qccp-gfcp-xxvc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UR98453 Security fix for GHSA-mf9v-mfxr-j63j applied in: airflow-3 3.1.8-r3, apache-superset 5.0.0-r7, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, tensorflow-gpu-jupyter 2.21.0-r5

GHSA-mf9v-mfxr-j63j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GM38314 Security fix for CVE-2026-22184 applied in: cassandra-reaper-fips 4.0.1-r3

Security vulnerability affects the cassandra-reaper-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ST77955 Security fix for CVE-2026-27171 applied in: cassandra-reaper-fips 4.0.1-r3

Security vulnerability affects the cassandra-reaper-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BK34152 Security fix for GHSA-pmwq-pjrm-6p5r applied in: cosign 3.0.6-r1, kyverno 1.17.2-r2, kyverno-fips 1.16.4-r1, kyverno-fips 1.17.2-r1, policy-controller 0.15.1-r0, policy-controller-fips 0.15.1-r0, rekor-backfill-index 1.2.2-r0, spire-server 1.14.5-r1, tekton-chains 0.25.2-r1, tekton-chains-fips 0.24.0-r1, tekton-chains-fips 0.25.2-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1

GHSA-pmwq-pjrm-6p5r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QM97024 Security fix for CVE-2026-45022 applied in: apko 1.2.2-r1, argo-cd 3.1.16-r1, argo-cd 3.2.12-r0, argo-cd 3.2.7-r2, argo-cd 3.3.11-r0, argo-cd 3.3.5-r2, argo-workflows 4.0.5-r0, argo-workflows-fips 4.0.6-r1, external-secrets-fips 0.17.0-r2, grafana-alloy 1.16.1-r0, kubevela 1.10.8-r0, kyverno 1.16.4-r3, kyverno 1.18.1-r2, kyverno 1.18.2-r0, melange 0.50.0-r1, pulumi-kubernetes-operator 2.7.0-r0, terragrunt-fips 0.95.1-r5, terragrunt-fips 0.96.1-r5, terragrunt-fips 0.97.2-r7, terragrunt-fips 0.98.0-r7, timoni 0.25.2-r0

CVE-2026-45022 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CX76698 Security fix for GHSA-6pjf-3r9x-m592 applied in: zot 2.1.13-r2

Security vulnerability affects the zot package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WJ78227 Security fix for GHSA-389r-gv7p-r3rp applied in: apko 1.2.2-r1, argo-cd 3.1.16-r1, argo-cd 3.2.12-r0, argo-cd 3.2.7-r2, argo-cd 3.3.11-r0, argo-cd 3.3.5-r2, argo-workflows 4.0.5-r0, argo-workflows-fips 4.0.6-r1, external-secrets-fips 0.17.0-r2, kubevela 1.10.8-r0, kyverno 1.18.1-r2, pulumi-kubernetes-operator 2.7.0-r0, terragrunt-fips 0.95.1-r5, terragrunt-fips 0.96.1-r5, terragrunt-fips 0.97.2-r7, terragrunt-fips 0.98.0-r7, timoni 0.25.2-r0

GHSA-389r-gv7p-r3rp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JU52681 Security fix for CVE-2018-2973 applied in: openjdk8 8.181.13-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BS27714 Security fix for GHSA-m3xc-h892-ggx6 applied in: apko 1.2.2-r1, argo-cd 3.1.16-r0, argo-cd 3.2.12-r0, argo-cd 3.2.7-r2, argo-cd 3.3.11-r0, argo-cd 3.3.5-r0, argo-events 1.9.10-r1, argo-workflows 4.0.5-r0, external-secrets-fips 0.17.0-r2, kubevela 1.10.8-r0, kyverno 1.18.1-r2, pulumi-kubernetes-operator 2.7.0-r0, terragrunt-fips 0.98.0-r8, timoni 0.25.2-r0

GHSA-m3xc-h892-ggx6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JY98800 Security fix for CVE-2018-3639 applied in: openjdk8 8.181.13-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZI20918 Security fix for CVE-2026-44740 applied in: apko 1.2.2-r1, argo-cd 3.1.16-r0, argo-cd 3.2.12-r0, argo-cd 3.2.7-r2, argo-cd 3.3.11-r0, argo-cd 3.3.5-r0, argo-events 1.9.10-r1, argo-workflows 4.0.5-r0, external-secrets-fips 0.17.0-r2, kubevela 1.10.8-r0, kyverno 1.16.4-r3, kyverno 1.18.1-r2, kyverno 1.18.2-r0, melange 0.50.0-r1, pulumi-kubernetes-operator 2.7.0-r0, rclone 1.69.0-r3, terragrunt-fips 0.95.1-r6, terragrunt-fips 0.96.1-r6, terragrunt-fips 0.97.2-r8, terragrunt-fips 0.98.0-r8, timoni 0.25.2-r0

CVE-2026-44740 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CD57328 Security fix for CVE-2026-44903 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300069.0-r1, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, elastic-beats 9.2.8-r6, grafana 12.2.10-r1, grafana 12.3.10-r1, grafana 12.4.7-r1, grafana 12.4.9-r1, grafana 13.0.5-r1, grafana 13.0.7-r1, helm-operator-fips 1.41.1-r2, istio 1.29.2-r1, istio-fips 1.30.0-r0, istio-pilot-discovery 1.28.3-r1, istio-pilot-discovery-fips 1.28.3-r1, keda 2.19.0-r3, keda-fips 2.18.3-r3, keda-fips 2.19.0-r2, metrics-server 0.8.1-r5, pmm 3.5.0-r0, prometheus-operator 0.69.1-r1, prometheus-operator 0.87.1-r3, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway 1.8.0-r3, prometheus-pushgateway 1.9.0-r1, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r1, prometheus-pushgateway-fips 1.8.0-r2, tempo 2.10.4-r1

CVE-2026-44903 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GA62476 Security fix for CVE-2018-2940 applied in: openjdk8 8.181.13-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AF97379 Security fix for CVE-2018-2952 applied in: openjdk8 8.181.13-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YR99837 Security fix for CVE-2018-2938 applied in: openjdk8 8.181.13-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DV32508 Security fix for CVE-2026-42154 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, elastic-beats 9.2.8-r6, elastic-beats 9.4.0-r1, helm-operator-fips 1.41.1-r2, istio 1.29.2-r1, istio-fips 1.30.0-r0, istio-pilot-discovery 1.28.3-r1, istio-pilot-discovery-fips 1.28.3-r1, keda 2.19.0-r3, keda 2.20.2-r1, keda-fips 2.18.3-r3, keda-fips 2.19.0-r2, metrics-server 0.8.1-r5, prometheus-operator 0.69.1-r2, prometheus-operator 0.87.1-r3, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r1, tempo 2.10.4-r1

CVE-2026-42154 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XX95477 Security fix for CVE-2026-42151 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300069.0-r1, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, elastic-beats 9.2.8-r6, elastic-beats 9.4.0-r1, grafana 12.2.10-r1, grafana 12.3.10-r1, grafana 12.4.7-r1, grafana 12.4.9-r1, grafana 13.0.5-r1, grafana 13.0.7-r1, helm-operator-fips 1.41.1-r2, istio 1.29.2-r1, istio-fips 1.30.0-r0, istio-pilot-discovery 1.28.3-r1, istio-pilot-discovery-fips 1.28.3-r1, keda 2.19.0-r3, keda-fips 2.18.3-r3, keda-fips 2.19.0-r2, metrics-server 0.8.1-r5, pmm 3.5.0-r0, prometheus-operator 0.69.1-r1, prometheus-operator 0.87.1-r3, prometheus-operator 0.90.1-r3, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway 1.8.0-r3, prometheus-pushgateway 1.9.0-r1, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r1, prometheus-pushgateway-fips 1.8.0-r2, tempo 2.10.4-r1

CVE-2026-42151 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZZ39043 Security fix for CVE-2018-16435 applied in: openjdk8 8.191.12-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UO85012 Security fix for CVE-2018-13785 applied in: openjdk8 8.191.12-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OD93097 Security fix for CVE-2018-3214 applied in: openjdk8 8.191.12-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NK48802 Security fix for CVE-2018-3183 applied in: openjdk8 8.191.12-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DO48798 Security fix for CVE-2018-3180 applied in: openjdk8 8.191.12-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RL41744 Security fix for CVE-2018-3169 applied in: openjdk8 8.191.12-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ON81542 Security fix for CVE-2018-3149 applied in: openjdk8 8.191.12-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XK82205 Security fix for CVE-2018-3139 applied in: openjdk8 8.191.12-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MK18357 Security fix for CVE-2025-66566 applied in: elasticsearch 9.5.2-r3, kafka 4.0.1-r4, kafka-fips 3.8.1-r8

CVE-2025-66566 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JR00912 Security fix for CVE-2018-3136 applied in: openjdk8 8.191.12-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UW43752 Security fix for CVE-2025-12183 applied in: elasticsearch 9.5.2-r3, kafka 4.0.1-r4, kafka-fips 3.8.1-r8, spark 3.5.9-r1, spark-sc213-jdk17-py312 3.4.4-r1, strimzi-kafka-operator 1.2.0-r3

CVE-2025-12183 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AE76662 Security fix for CVE-2018-11212 applied in: openjdk8 8.201.08-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LO90271 Security fix for CVE-2019-2426 applied in: openjdk8 8.201.08-r0

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...