CLEANSTART-2026-FB35922 Security fix for GHSA-8r3f-844c-mc37 applied in: argo-events 1.6.3-r1, aws-flb-kinesis 1.10.3-r0, cluster-proportional-autoscaler 1.8.11-r0, kafka_exporter-fips 1.6.0-r0, kafka_exporter-fips 1.7.0-r0, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, kube-vip-fips 0.7.2-r0, litestream 0.5.2-r0, litestream 0.5.2-r1, local-static-provisioner 2.6.0-r1, local-static-provisioner-fips 2.6.0-r1, metallb 0.13.12-r4, multus-cni-fips 4.0.2-r2, nfs-subdir-external-provisioner-fips 4.0.16-r0, nfs-subdir-external-provisioner-fips 4.0.17-r0, nfs-subdir-external-provisioner-fips 4.0.18-r1, prometheus-node-exporter-fips 1.6.1-r0, prometheus-node-exporter-fips 1.7.0-r0, wavefront-collector-for-kubernetes 1.13.0-r0

GHSA-8r3f-844c-mc37 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NC69748 Security fix for GHSA-2464-8j7c-4cjm applied in: argo-events 1.9.7-r1, argo-workflows 3.6.16-r0, fulcio 1.7.1-r0, istio 1.27.1-r0, istio 1.28.7-r0, kyverno-fips 1.13.6-r1, kyverno-policy-reporter-fips 3.4.2-r0, kyverno-policy-reporter-fips 3.5.0-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, opentofu-fips 1.10.7-r0, opentofu-fips 1.10.7-r1, spark-operator 2.2.1-r0, tempo 2.7.2-r0, tempo 2.8.3-r0, tempo-fips 2.7.2-r0, tempo-fips 2.8.3-r0, tempo-fips 2.9.1-r0

GHSA-2464-8j7c-4cjm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KG56080 Security fix for GHSA-hcg3-q754-cr77 applied in: calico-fips 3.27.5-r0, cfssl 1.5.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, dynamic-localpv-provisioner 4.4.0-r0, falcoctl 0.11.0-r0, go-fips-1.24 1.24.7-r0, go1.24 1.24.11-r0, harbor-registry 3.0.0.1-r2, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, kube-rbac-proxy-fips 0.19.1-r0, kube-state-metrics-fips 2.14.0-r0, kube-state-metrics-fips 2.15.0-r0, kyverno-fips 1.13.6-r1, litestream 0.3.14-r3, modelmesh-runtime-adapter 0.12.0-r0, modelmesh-runtime-adapter 0.12.0-r1, multus-cni-fips 3.9.3-r2, opentofu-fips 1.9.4-r0, postgres-operator 1.12.2-r2, prometheus-node-exporter 1.8.0-r3, prometheus-statsd-exporter 0.28.0-r0, prometheus-statsd-exporter-fips 0.28.0-r0, tempo-fips 2.7.2-r0, wavefront-collector-for-kubernetes 1.13.0-r0

GHSA-hcg3-q754-cr77 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JE43065 Security fix for GHSA-4vq8-7jfc-9cvp applied in: cert-manager-cmctl-fips 2.1.1-r0, elastic-beats 8.18.1-r0, elastic-beats 9.2.8-r0, elastic-beats 9.3.3-r0, falcoctl 0.11.0-r0, gitness 3.3.0-r1, harbor-fips 2.10.3-r0, kyverno-fips 1.12.7-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, paranoia 0.2.1-r0, skaffold 2.16.1-r1

GHSA-4vq8-7jfc-9cvp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UY39386 Security fix for CVE-2023-5870 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5870 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZS91347 Security fix for CVE-2023-5869 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5869 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JD37353 Security fix for CVE-2023-5868 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5868 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FA69444 Security fix for CVE-2024-0985 applied in: postgresql15 15.6-r0, postgresql16 16.2-r0, postgresql17 16.2-r0, postgresql18 16.2-r0

CVE-2024-0985 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MY37775 Security fix for CVE-2024-10979 applied in: postgresql16 16.5-r0

Security vulnerability affects the postgresql16 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PN72397 Security fix for CVE-2024-7348 applied in: postgresql15 15.8-r0, postgresql16 16.4-r0, postgresql17 16.4-r0, postgresql18 16.4-r0

CVE-2024-7348 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-JJ02952 Security fix for CVE-2017-7614 applied in: binutils 2.28-r1

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-QJ02692 Security fix for CVE-2018-20712 applied in: binutils 2.32-r0

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NO21285 Security fix for CVE-2024-10978 applied in: postgresql16 16.5-r0

Security vulnerability affects the postgresql16 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-FE06703 Security fix for CVE-2018-20002 applied in: binutils 2.32-r0

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-SE70247 Security fix for CVE-2019-16707 applied in: hunspell 1.7.0-r1

Security vulnerability affects the hunspell package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-MW15287 Security fix for CVE-2018-19932 applied in: binutils 2.32-r0

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZE96570 Security fix for GHSA-9h84-qmv7-982p applied in: cert-manager-cmctl 2.3.0-r0, cert-manager-cmctl-fips 2.1.1-r0, cert-manager-cmctl-fips 2.3.0-r0, chartmuseum-fips 0.14.0-r1, chartmuseum-fips 0.15.0-r4, harbor 2.13.4-r2, harbor 2.14.2-r1, harbor-fips 2.10.3-r0, harbor-fips 2.12.4-r1, harbor-fips 2.13.2-r1, k8sgpt 0.4.26-r0, kubevela 1.10.8-r0

GHSA-9h84-qmv7-982p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-TT45966 Security fix for GHSA-rq77-p4h8-4crw applied in: harbor-fips 2.10.3-r0, harbor-fips 2.12.4-r1, harbor-fips 2.13.2-r1

GHSA-rq77-p4h8-4crw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-SF33121 Security fix for CVE-2020-15250 applied in: junit 4.13.1-r0

Security vulnerability affects the junit package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PF53076 Security fix for CVE-2022-23181 applied in: tomcat10 9.0.58-r0, tomcat11 9.0.58-r0, tomcat9 9.0.58-r0

CVE-2022-23181 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-VP24183 Security fix for GHSA-x4rx-4gw3-53p4 applied in: elastic-beats-fips 8.19.3-r0

Security vulnerability affects the elastic-beats-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EU30316 Security fix for CVE-2022-34305 applied in: tomcat10 9.0.64-r0, tomcat11 9.0.64-r0, tomcat9 9.0.64-r0

CVE-2022-34305 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CD34884 Security fix for CVE-2025-46818 applied in: redis 7.2.11-r0, redis 7.4.6-r0, redis 8.0.4-r0, redis 8.2.2-r0

CVE-2025-46818 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WJ73898 Security fix for CVE-2024-10976 applied in: postgresql16 16.5-r0

Security vulnerability affects the postgresql16 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-EQ95920 Security fix for CVE-2025-0411 applied in: 7zip 23.01-r0

Security vulnerability affects the 7zip package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AH36441 Security fix for CVE-2024-10977 applied in: postgresql16 16.5-r0

Security vulnerability affects the postgresql16 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OX03346 Security fix for CVE-2022-29885 applied in: tomcat10 9.0.63-r0, tomcat11 9.0.63-r0, tomcat9 9.0.63-r0

CVE-2022-29885 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DH16511 Security fix for CVE-2025-46819 applied in: redis 7.2.11-r0, redis 7.4.6-r0, redis 8.0.4-r0, redis 8.2.2-r0

CVE-2025-46819 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-YO21783 Security fix for GHSA-qxpb-5wg8-xv66 applied in: calico-fips 3.27.5-r0

Security vulnerability affects the calico-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-BU54540 Security fix for CVE-2021-3487 applied in: binutils 2.35.2-r1

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-JG55495 Security fix for CVE-2018-19931 applied in: binutils 2.32-r0

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AT03088 Security fix for CVE-2022-42252 applied in: tomcat10 9.0.68-r0, tomcat11 9.0.68-r0, tomcat9 9.0.68-r0

CVE-2022-42252 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-SP62173 Security fix for CVE-2022-38126 applied in: binutils 2.39-r0

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AA57150 Security fix for GHSA-c5q2-7r4c-mv6g applied in: harbor-fips 2.10.3-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4

GHSA-c5q2-7r4c-mv6g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC09647 Security fix for CVE-2025-1094 applied in: postgresql16 16.8-r0

Security vulnerability affects the postgresql16 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QE34516 Security fix for CVE-2025-46817 applied in: redis 7.2.11-r0, redis 7.4.6-r0, redis 8.0.4-r0, redis 8.2.2-r0

CVE-2025-46817 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NI16079 Security fix for CVE-2025-49844 applied in: redis 7.2.11-r0, redis 7.4.6-r0, redis 8.0.4-r0, redis 8.2.2-r0

CVE-2025-49844 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-YM44855 Security fix for CVE-2022-38533 applied in: binutils 2.39-r2

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GJ99404 Security fix for GHSA-v778-237x-gjrc applied in: calico-fips 3.27.5-r0, cfssl 1.5.0-r1, go-fips-1.24 1.24.7-r0, go1.24 1.24.11-r0, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.16.1-r0, kube-rbac-proxy-fips 0.17.1-r0, kube-rbac-proxy-fips 0.19.1-r0, litestream 0.3.14-r3, modelmesh-runtime-adapter 0.12.0-r0, modelmesh-runtime-adapter 0.12.0-r1, multus-cni-fips 3.9.3-r2, nfs-subdir-external-provisioner-fips 4.0.16-r0, nfs-subdir-external-provisioner-fips 4.0.17-r0, nfs-subdir-external-provisioner-fips 4.0.18-r1, postgres-operator 1.12.2-r2, prometheus-node-exporter 1.8.0-r3, prometheus-statsd-exporter 0.28.0-r0, prometheus-statsd-exporter-fips 0.28.0-r0, rabbitmq-messaging-topology-operator 1.15.0-r1, wavefront-collector-for-kubernetes 1.13.0-r0

GHSA-v778-237x-gjrc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NO70924 Security fix for CVE-2022-45143 applied in: tomcat10 9.0.70-r0, tomcat11 9.0.70-r0, tomcat9 9.0.70-r0

CVE-2022-45143 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UW16239 Security fix for GHSA-2v5j-vhc3-9cwm applied in: argo-cd 3.1.4-r0, argo-cd-fips 3.0.16-r0, argo-cd-fips 3.1.4-r0

GHSA-2v5j-vhc3-9cwm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-WG19019 Security fix for CVE-2023-1579 applied in: binutils 2.40-r0

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QQ38199 Security fix for GHSA-93mq-9ffx-83m2 applied in: argo-cd 3.1.4-r0, argo-cd-fips 3.0.16-r0, argo-cd-fips 3.0.20-r2, argo-cd-fips 3.1.4-r0, argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, tempo-fips 2.7.2-r0

GHSA-93mq-9ffx-83m2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NE41969 Security fix for CVE-2025-8715 applied in: postgresql16 16.10-r0, postgresql17 17.6-r0, postgresql18 17.6-r0

CVE-2025-8715 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-EV96461 Security fix for GHSA-5pf6-2qwx-pxm2 applied in: harbor-fips 2.10.3-r0

Security vulnerability affects the harbor-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-PC19077 Security fix for CVE-2023-1972 applied in: binutils 2.40-r10

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RF65873 Security fix for CVE-2023-28708 applied in: tomcat10 9.0.73-r0, tomcat11 9.0.73-r0, tomcat9 9.0.73-r0

CVE-2023-28708 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VW03331 Security fix for CVE-2023-24998 applied in: tomcat10 9.0.71-r0, tomcat11 9.0.71-r0, tomcat9 9.0.71-r0

CVE-2023-24998 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PL37592 Security fix for CVE-2025-4207 applied in: postgresql16 16.9-r0

Security vulnerability affects the postgresql16 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HS79481 Security fix for CVE-2023-41080 applied in: tomcat10 9.0.80-r0, tomcat11 9.0.80-r0, tomcat9 9.0.80-r0

CVE-2023-41080 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...