CLEANSTART-2026-KK38106 Security fix for CVE-2021-41817 applied in: ruby 3.0.3-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WY79580 Security fix for CVE-2022-28738 applied in: ruby 3.1.2-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RW40260 Security fix for CVE-2021-41816 applied in: ruby 3.0.3-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FA27151 Security fix for CVE-2022-28739 applied in: ruby 3.1.2-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JV37320 Security fix for CVE-2024-27280 applied in: ruby 3.3.1-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KX08240 Security fix for CVE-2023-28755 applied in: ruby 3.1.4-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JL84667 Security fix for CVE-2021-33621 applied in: ruby 3.1.3-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NI61642 Security fix for CVE-2023-28756 applied in: ruby 3.1.4-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LA33786 Security fix for CVE-2024-27282 applied in: ruby 3.3.1-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GN52279 Security fix for CVE-2024-27281 applied in: ruby 3.3.1-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SZ82695 Security fix for CVE-2025-58767 applied in: ruby 3.2.10-r0

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EK77943 Security fix for GHSA-q339-8rmv-2mhv applied in: ruby 3.4.9-r1

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EG50639 Security fix for CVE-2026-73566 applied in: npm 11.17.0-r2

Security vulnerability affects the npm package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ON16702 Security fix for CVE-2026-55677 applied in: kube-metrics-adapter 0.2.9-r3, temporal 1.8.2-r1

CVE-2026-55677 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BD83881 Security fix for CVE-2021-32751 applied in: gradle 7.2-r0

Security vulnerability affects the gradle package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QY29190 Security fix for CVE-2020-11979 applied in: gradle 6.8.3-r0

Security vulnerability affects the gradle package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UI97459 Security fix for CVE-2023-26053 applied in: gradle 7.6.1-r0

Security vulnerability affects the gradle package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FP42808 Security fix for CVE-2026-56854 applied in: cadvisor 0.55.1-r6, cortex 1.20.1-r5, dex 2.44.0-r8, dynatrace-operator 1.10.1-r1, dynatrace-operator 1.10.2-r1, dynatrace-operator 1.7.3-r5, dynatrace-operator 1.8.1-r8, dynatrace-operator 1.9.0-r6, external-secrets-operator 2.8.0-r3, fulcio 1.8.8-r2, go-discover 0_git20250325-r4, haproxy-ingress 0.13.19-r3, haproxy-ingress 0.14.12-r4, haproxy-ingress 0.15.4-r6, haproxy-ingress 0.16.1-r6, helm 3.21.4-r1, helm 4.2.4-r2, helm-operator 1.41.1-r5, helm-operator 1.42.3-r4, keda 2.17.2-r2, knative-serving 1.21.3-r4, knative-serving 1.22.1-r4, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-vip-fips 0.9.2-r1, kyverno 1.16.4-r3, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, minio-client 0.20250721.052808-r1, octo-sts 0.8.0-r1, opa 1.20.0-r2, opentelemetry-collector 0.154.0-r2, prometheus-node-exporter 1.10.2-r5, prometheus-node-exporter 1.9.1-r5, prometheus-node-exporter-fips 1.11.1-r3, prometheus-operator 0.90.1-r4, prometheus-operator 0.91.0-r5, prometheus-redis-exporter 1.87.0-r2, prometheus-redis-exporter 1.88.0-r3, rancher-fleet-agent 0.15.6-r0, restic 0.18.1-r6, restic-fips 0.18.1-r7, step-issuer 0.10.2-r6, step-issuer 0.11.0-r6, step-issuer 0.9.11-r4, tekton-chains-fips 0.29.1-r1, trust-manager 0.22.1-r4, vault 1.20.4-r10, vault-k8s 1.4.2-r2, vault-k8s 1.5.0.r4, victoriametrics-operator 0.73.1-r1

CVE-2026-56854 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IV50826 Security fix for CVE-2026-56855 applied in: atlantis 0.47.1-r1, boring-registry 0.18.0-r1, cadvisor 0.55.1-r7, cadvisor 0.56.2-r4, cadvisor 0.57.0-r6, cadvisor 0.60.5-r2, cert-manager 1.18.6-r6, cert-manager 1.19.6-r4, cert-manager 1.20.3-r5, cert-manager 1.21.1-r1, cosign 2.6.5-r3, dex 2.42.1-r4, dex 2.43.1-r3, dex 2.44.0-r8, dex 2.45.1-r7, dynatrace-operator 1.10.2-r1, dynatrace-operator 1.7.3-r5, dynatrace-operator 1.8.1-r8, dynatrace-operator 1.9.0-r6, git-lfs 3.7.1-r3, gitea 1.27.2-r2, go-discover 0_git20250325-r4, haproxy-ingress 0.13.19-r4, haproxy-ingress 0.14.12-r5, haproxy-ingress 0.15.4-r7, haproxy-ingress 0.16.1-r7, helm 3.21.4-r2, helm 4.2.4-r2, keda 2.20.2-r2, knative-serving 1.21.3-r4, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-vip-fips 0.9.2-r1, kube-vip-fips 1.2.3-r1, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, minio-client 0.20250721.052808-r1, minio-operator 6.0.4-r8, minio-operator 7.0.1-r8, minio-operator 7.1.1-r8, nats-streaming 0.25.6-r7, opa 1.20.2-r2, opentelemetry-collector-contrib 0.157.0-r1, prometheus-alertmanager 0.34.0-r2, prometheus-mysqld-exporter 0.17.2-r6, prometheus-mysqld-exporter 0.18.0-r6, prometheus-mysqld-exporter 0.19.0-r5, prometheus-mysqld-exporter 0.20.0-r0, prometheus-node-exporter 1.10.2-r5, prometheus-node-exporter 1.11.1-r4, prometheus-node-exporter 1.12.1-r2, prometheus-node-exporter 1.9.1-r5, prometheus-node-exporter-fips 1.11.1-r3, prometheus-operator 0.90.1-r4, prometheus-operator 0.91.0-r5, prometheus-operator 0.92.1-r3, prometheus-redis-exporter 1.87.0-r2, prometheus-redis-exporter 1.88.0-r3, prometheus-statsd-exporter 0.28.0-r4, prometheus-statsd-exporter 0.29.0-r1, prometheus-statsd-exporter 0.30.0-r0, rclone 1.72.1-r13, rclone 1.73.5-r7, rclone 1.74.4-r2, restic 0.18.1-r8, restic-fips 0.18.1-r7, sealed-secrets 0.36.6-r5, sealed-secrets 0.37.0-r3, sealed-secrets 0.38.4-r1, step 0.27.5-r5, step 0.28.7-r6, step 0.29.0-r5, step-issuer 0.10.2-r6, step-issuer 0.11.0-r6, step-issuer 0.9.11-r4, terraform 1.16.0-r2, tigera-operator 1.42.1-r4, trust-manager 0.21.1-r3, trust-manager 0.22.1-r4, trust-manager 0.23.0-r2, trust-manager 0.24.0-r2, vault 1.19.5-r4, vault 1.20.4-r11, vault 1.21.4-r11, vault 2.0.4-r3, vault-k8s 1.4.2-r3, velero 1.15.2-r9, velero 1.17.2-r9, velero 1.18.2-r8, velero-fips 1.18.2-r7, victoriametrics-operator 0.71.0-r3, victoriametrics-operator 0.73.1-r1, victoriametrics-operator-fips 0.71.0-r1

CVE-2026-56855 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CS12925 Security fix for CVE-2026-78662 applied in: atlantis 0.47.1-r1, boring-registry 0.18.0-r1, cadvisor 0.55.1-r7, cadvisor 0.56.2-r4, cadvisor 0.57.0-r6, cadvisor 0.60.5-r2, cert-manager 1.18.6-r6, cert-manager 1.19.6-r4, cert-manager 1.20.3-r5, cert-manager 1.21.1-r1, cosign 2.6.5-r3, dex 2.42.1-r4, dex 2.43.1-r3, dex 2.44.0-r8, dex 2.45.1-r7, dynatrace-operator 1.10.2-r1, dynatrace-operator 1.7.3-r5, dynatrace-operator 1.8.1-r8, dynatrace-operator 1.9.0-r6, git-lfs 3.7.1-r3, gitea 1.27.2-r2, haproxy-ingress 0.13.19-r4, haproxy-ingress 0.14.12-r5, haproxy-ingress 0.15.4-r7, haproxy-ingress 0.16.1-r7, helm 3.21.4-r2, helm 4.2.4-r2, keda 2.20.2-r2, knative-serving 1.21.3-r4, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-vip-fips 0.9.2-r1, kube-vip-fips 1.2.3-r1, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, minio-client 0.20250721.052808-r1, minio-operator 6.0.4-r8, minio-operator 7.0.1-r8, minio-operator 7.1.1-r8, nats-streaming 0.25.6-r7, opa 1.20.2-r2, opentelemetry-collector-contrib 0.157.0-r1, prometheus-alertmanager 0.34.0-r2, prometheus-mysqld-exporter 0.17.2-r6, prometheus-mysqld-exporter 0.18.0-r6, prometheus-mysqld-exporter 0.19.0-r5, prometheus-mysqld-exporter 0.20.0-r0, prometheus-node-exporter 1.10.2-r5, prometheus-node-exporter 1.11.1-r4, prometheus-node-exporter 1.12.1-r2, prometheus-node-exporter 1.9.1-r5, prometheus-node-exporter-fips 1.11.1-r3, prometheus-operator 0.90.1-r4, prometheus-operator 0.91.0-r5, prometheus-operator 0.92.1-r3, prometheus-redis-exporter 1.87.0-r2, prometheus-redis-exporter 1.88.0-r3, prometheus-statsd-exporter 0.28.0-r4, prometheus-statsd-exporter 0.29.0-r1, prometheus-statsd-exporter 0.30.0-r0, rclone 1.72.1-r13, rclone 1.73.5-r7, rclone 1.74.4-r2, restic 0.18.1-r8, restic-fips 0.18.1-r7, sealed-secrets 0.36.6-r5, sealed-secrets 0.37.0-r3, sealed-secrets 0.38.4-r1, step 0.27.5-r5, step 0.28.7-r6, step 0.29.0-r5, step-issuer 0.10.2-r6, step-issuer 0.9.11-r4, terraform 1.16.0-r1, tigera-operator 1.42.1-r4, trust-manager 0.21.1-r3, trust-manager 0.22.1-r4, trust-manager 0.23.0-r2, trust-manager 0.24.0-r2, vault 1.19.5-r4, vault 1.20.4-r11, vault 1.21.4-r11, vault 2.0.4-r3, vault-k8s 1.4.2-r3, velero 1.15.2-r9, velero 1.17.2-r9, velero 1.18.2-r8, velero-fips 1.18.2-r7, victoriametrics-operator 0.71.0-r3, victoriametrics-operator 0.73.1-r1, victoriametrics-operator-fips 0.71.0-r1

CVE-2026-78662 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW43882 Security fix for CVE-2026-84304 applied in: cadvisor 0.55.1-r7, cadvisor 0.56.2-r4, cadvisor 0.57.0-r6, cadvisor 0.60.5-r2, cert-manager 1.18.6-r6, cert-manager 1.21.1-r1, cloudnative-pg 1.27.4-r3, cloudnative-pg 1.28.4-r2, cloudnative-pg 1.29.2-r3, cloudnative-pg 1.30.0-r2, cloudnative-pg-fips 1.30.0-r1, cosign 2.6.5-r3, crossplane-provider-keycloak 3.0.1-r0, dex 2.42.1-r6, dex 2.43.1-r5, dex 2.44.0-r8, dex 2.45.1-r7, dynatrace-operator 1.10.2-r1, dynatrace-operator 1.7.3-r2, dynatrace-operator 1.8.1-r8, dynatrace-operator 1.9.0-r6, gitea 1.27.2-r2, go-discover 0_git20250325-r4, knative-serving 1.21.3-r4, kube-metrics-adapter 0.2.9-r3, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-vip-fips 0.9.2-r1, kube-vip-fips 1.2.3-r1, kyverno 1.16.4-r3, loki-fips 3.7.7-r0, metallb 0.16.0-r4, minio-client 0.20250721.052808-r1, opa 1.20.0-r1, opentelemetry-collector 0.154.0-r2, opentelemetry-collector-contrib 0.156.0-r1, opentelemetry-collector-contrib 0.157.0-r1, prometheus-alertmanager 0.34.0-r2, prometheus-operator 0.91.0-r6, prometheus-operator 0.92.1-r4, prometheus-operator 0.93.1-r1, rabbitmq-cluster-operator 2.20.1-r7, rabbitmq-cluster-operator 2.21.1-r4, rabbitmq-messaging-topology-operator 1.19.3-r5, rancher-fleet-agent 0.15.6-r0, rclone 1.73.5-r7, rclone 1.74.4-r2, restic 0.18.1-r7, restic-fips 0.18.1-r7, step 0.27.5-r5, step 0.28.7-r6, step 0.29.0-r5, step-issuer 0.10.2-r6, step-issuer 0.11.0-r6, step-issuer 0.9.11-r4, tempo 3.0.3-r1, terraform 1.16.0-r1, vault 1.19.5-r4, vault 1.20.4-r10, vault 1.21.4-r11, vault 2.0.4-r3, velero 1.15.2-r9, velero 1.17.2-r9, velero 1.18.2-r8, velero-plugin-for-aws 1.11.1-r9, velero-plugin-for-aws 1.12.2-r9, velero-plugin-for-aws 1.13.2-r6, velero-plugin-for-csi 0.4.3-r5, velero-plugin-for-csi 0.5.1-r5, velero-plugin-for-csi 0.6.3-r6, victoriametrics-operator 0.71.0-r3, victoriametrics-operator 0.73.1-r1

CVE-2026-84304 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WR91768 Security fix for CVE-2025-24855 applied in: ingress-nginx-controller 1.12.8-r0, ingress-nginx-controller 1.14.5-r3

CVE-2025-24855 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZL37756 Security fix for CVE-2024-55549 applied in: ingress-nginx-controller 1.12.8-r0, ingress-nginx-controller 1.14.5-r3

CVE-2024-55549 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XS00515 Security fix for CVE-2026-59946 applied in: composer 2.10.2-r0

Security vulnerability affects the composer package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KK97612 Security fix for CVE-2026-59947 applied in: composer 2.10.2-r0

Security vulnerability affects the composer package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UO36556 Security fix for CVE-2026-59948 applied in: composer 2.10.2-r0

Security vulnerability affects the composer package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KE92927 Security fix for CVE-2026-8384 applied in: apache-nifi 2.10.0-r3, kafka 4.3.1-r2, solr 10.0.0-r6, trino 480-r10

CVE-2026-8384 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IH90619 Security fix for CVE-2019-1543 applied in: openssl 1.1.1b-r1

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RI18304 Security fix for CVE-2019-1563 applied in: openssl 1.1.1d-r1

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TP50755 Security fix for CVE-2019-1547 applied in: openssl 1.1.1d-r1

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WP77838 Security fix for CVE-2019-1549 applied in: openssl 1.1.1d-r1

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JO98331 Security fix for CVE-2019-1551 applied in: openssl 1.1.1d-r3

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DU95001 Security fix for CVE-2021-23839 applied in: openssl 1.1.1j-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ON27982 Security fix for CVE-2021-23841 applied in: openssl 1.1.1j-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AD83127 Security fix for CVE-2021-23840 applied in: openssl 1.1.1j-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JE67710 Security fix for CVE-2020-1971 applied in: openssl 1.1.1i-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FG73322 Security fix for CVE-2020-1967 applied in: openssl 1.1.1g-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JY20850 Security fix for CVE-2021-3450 applied in: openssl 1.1.1k-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AP04707 Security fix for CVE-2021-3712 applied in: openssl 1.1.1l-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TQ82043 Security fix for CVE-2025-63811 applied in: amazon-cloudwatch-agent 1.300070.0-r1, vault 1.20.4-r0

CVE-2025-63811 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RT76618 Security fix for CVE-2021-3449 applied in: openssl 1.1.1k-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SV91559 Security fix for CVE-2022-0778 applied in: openssl 3.0.2-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TN29223 Security fix for CVE-2021-3711 applied in: openssl 1.1.1l-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TE77063 Security fix for CVE-2022-1434 applied in: openssl 3.0.3-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KW51921 Security fix for CVE-2022-1473 applied in: openssl 3.0.3-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VH14803 Security fix for CVE-2021-4044 applied in: openssl 3.0.1-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HT25779 Security fix for CVE-2022-3358 applied in: openssl 3.0.6-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VX91927 Security fix for CVE-2022-2097 applied in: openssl 3.0.5-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VF23025 Security fix for CVE-2022-1343 applied in: openssl 3.0.3-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KI57561 Security fix for CVE-2026-59292 applied in: apache-nifi 2.10.0-r8

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...