Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Multiple open‑source components allow remote code execution
published 1 month ago
Summary
A number of packages, including Apache NiFi, apko, Argo CD, Argo Workflows, and the AWS EKS Pod Identity Agent, contain a flaw that could let an attacker run code on your systems. The issue has been fixed in newer releases of each component. Upgrade to the latest versions of the listed packages as soon as possible to protect your environment.
What to do
- Update cleanstart apache-nifi to version 2.10.0-r4.
- Update cleanstart apko to version 1.2.2-r1.
- Update cleanstart argo-cd-fips to version 3.0.23-r1.
- Update cleanstart argo-cd-fips to version 3.1.14-r1.
- Update cleanstart argo-workflows to version 4.0.5-r0.
- Update cleanstart aws-eks-pod-identity-agent to version 0.1.36-r0.
- Update cleanstart aws-eks-pod-identity-agent-fips to version 0.1.36-r0.
- Update cleanstart aws-load-balancer-controller to version 3.2.0-r0.
- Update cleanstart aws-network-policy-agent to version 1.3.2-r1.
- Update cleanstart aws-network-policy-agent-fips to version 1.3.2-r0.
- Update cleanstart aws-privateca-issuer to version 1.7.0-r0.
- Update cleanstart aws-privateca-issuer-fips to version 1.7.0-r1.
- Update cleanstart azuredisk-csi-fips to version 1.33.9-r1.
- Update cleanstart cadvisor-fips to version 0.55.1-r0.
- Update cleanstart calico to version 3.30.7-r1.
- Update cleanstart cass-operator-fips to version 1.30.0-r1.
- Update cleanstart cert-manager to version 1.17.4-r2.
- Update cleanstart cert-manager to version 1.18.6-r1.
- Update cleanstart cert-manager to version 1.20.0-r0.
- Update cleanstart cert-manager to version 1.20.2-r0.
- Update cleanstart cert-manager-cmctl-fips to version 2.4.0-r3.
- Update cleanstart cert-manager-webhook-pdns-fips to version 3.2.3-r2.
- Update cleanstart certificate-transparency-trillian-ctserver to version 1.3.2-r2.
- Update cleanstart certificate-transparency-trillian-ctserver-fips to version 1.3.2-r0.
- Update cleanstart cilium to version 1.17.15-r0.
- Update cleanstart cilium to version 1.18.9-r0.
- Update cleanstart cilium to version 1.19.3-r0.
- Update cleanstart cloudnative-pg-fips to version 1.24.4-r5.
- Update cleanstart cloudnative-pg-fips to version 1.25.4-r4.
- Update cleanstart cloudnative-pg-fips to version 1.26.3-r3.
- Update cleanstart configmap-reload to version 0.15.0-r0.
- Update cleanstart confluent-cp-docker-utils to version 1.0.8-r1.
- Update cleanstart confluent-kafka to version 8.2.0-r2.
- Update cleanstart cortex to version 1.21.0-r2.
- Update cleanstart cosign to version 3.0.6-r1.
- Update cleanstart dex to version 2.45.1-r2.
- Update cleanstart dex-fips to version 2.43.1-r5.
- Update cleanstart druid-exporter-fips to version 0.10-r5.
- Update cleanstart druid-exporter-fips to version 0.11-r6.
- Update cleanstart druid-exporter-fips to version 0.9-r4.
- Update cleanstart elastic-beats to version 8.19.15-r2.
- Update cleanstart elastic-beats to version 9.2.8-r2.
- Update cleanstart elastic-beats-fips to version 9.2.8-r0.
- Update cleanstart external-secrets to version 2.2.0-r0.
- Update cleanstart external-secrets-fips to version 0.17.0-r2.
- Update cleanstart external-secrets-fips to version 2.2.0-r0.
- Update cleanstart fluent-operator-fips to version 3.4.0-r9.
- Update cleanstart fluent-operator-fips to version 3.6.0-r5.
- Update cleanstart spark-operator to version 2.3.0-r4.
- Update cleanstart fluent-operator-fips to version 3.7.0-r3.
- Update cleanstart flux-notification-controller-fips to version 1.5.0-r0.
- Update cleanstart gostatsd to version 28.3.0-r2.
- Update cleanstart gptscript to version 0.9.9-r1.
- Update cleanstart helm to version 4.0.5-r2.
- Update cleanstart helm to version 4.1.3-r0.
- Update cleanstart helm-fips to version 4.1.3-r0.
- Update cleanstart helm-operator to version 1.42.1-r0.
- Update cleanstart helm-operator to version 1.42.2-r0.
- Update cleanstart helm-operator-fips to version 1.41.1-r2.
- Update cleanstart istio to version 1.28.5-r3.
- Update cleanstart istio to version 1.29.2-r1.
- Update cleanstart istio-fips to version 1.26.8-r3.
- Update cleanstart istio-fips to version 1.27.9-r1.
- Update cleanstart istio-fips to version 1.28.6-r0.
- Update cleanstart istio-pilot-discovery-fips to version 1.28.3-r1.
- Update cleanstart k8ssandra-client-fips to version 0.5.0-r11.
- Update cleanstart k8ssandra-client-fips to version 0.6.4-r9.
- Update cleanstart k8ssandra-client-fips to version 0.7.0-r7.
- Update cleanstart k8ssandra-operator to version 1.26.0-r0.
- Update cleanstart k8ssandra-operator-fips to version 1.29.0-r1.
- Update cleanstart karpenter to version 1.9.0-r1.
- Update cleanstart karpenter-fips to version 1.9.0-r0.
- Update cleanstart keda to version 2.19.0-r3.
- Update cleanstart keda-fips to version 2.18.3-r3.
- Update cleanstart kor to version 0.3.8-r1.
- Update cleanstart kor to version 0.5.9-r1.
- Update cleanstart kor to version 0.6.7-r0.
- Update cleanstart kserve to version 0.16.0-r2.
- Update cleanstart kserve-modelmesh-serving to version 0.12.0-r2.
- Update cleanstart kube-bench to version 0.15.0-r1.
- Update cleanstart kube-rbac-proxy to version 0.20.2-r1.
- Update cleanstart kube-rbac-proxy-fips to version 0.20.2-r1.
- Update cleanstart kube-state-metrics to version 2.10.1-r1.
- Update cleanstart kube-state-metrics to version 2.15.0-r1.
- Update cleanstart kube-state-metrics-fips to version 2.18.0-r1.
- Update cleanstart kube-vip to version 1.1.0-r0.
- Update cleanstart kubernetes to version 1.33.11-r0.
- Update cleanstart kubernetes to version 1.34.1-r5.
- Update cleanstart kubernetes to version 1.34.7-r0.
- Update cleanstart kubernetes-csi-driver-nfs-fips to version 4.13.0-r3.
- Update cleanstart kubernetes-csi-external-attacher to version 4.10.0-r0.
- Update cleanstart kubernetes-csi-external-attacher-fips to version 4.10.0-r0.
- Update cleanstart kubernetes-csi-external-provisioner-fips to version 6.1.0-r4.
- Update cleanstart kubernetes-csi-external-resizer to version 2.0.0-r0.
- Update cleanstart kubernetes-csi-external-resizer-fips to version 2.0.0-r1.
- Update cleanstart kubernetes-csi-external-resizer-fips to version 2.1.0-r1.
- Update cleanstart spark-operator to version 2.4.0-r4.
- Update cleanstart kubernetes-csi-external-snapshotter-fips to version 8.4.0-r4.
- Update cleanstart kubernetes-csi-node-driver-registrar to version 2.13.0-r0.
- Update cleanstart kubernetes-csi-node-driver-registrar-fips to version 2.16.0-r3.
- Update cleanstart kubernetes-dashboard to version 7.14.0-r1.
- Update cleanstart kubernetes-dashboard-api to version 1.14.0-r1.
- Update cleanstart kubernetes-dashboard-api-fips to version 1.14.0-r1.
- Update cleanstart kubernetes-dashboard-auth to version 1.4.0-r1.
- Update cleanstart kubernetes-dashboard-auth-fips to version 1.4.0-r2.
- Update cleanstart kubernetes-dashboard-fips to version 7.14.0-r0.
- Update cleanstart kubernetes-dashboard-metrics-scraper to version 1.2.2-r2.
- Update cleanstart kubernetes-dashboard-metrics-scraper-fips to version 1.2.2-r1.
- Update cleanstart kubernetes-dashboard-web to version 1.7.0-r0.
- Update cleanstart kubernetes-event-exporter to version 1.7-r1.
- Update cleanstart kubernetes-event-exporter-fips to version 1.7-r0.
- Update cleanstart kubernetes-fips to version 1.35.4-r0.
- Update cleanstart kured to version 1.20.0-r0.
- Update cleanstart kustomize-fips to version 5.8.1-r0.
- Update cleanstart kyverno-fips to version 1.16.4-r1.
- Update cleanstart kyverno-fips to version 1.17.2-r1.
- Update cleanstart kyverno-policy-reporter-fips to version 3.4.2-r6.
- Update cleanstart kyverno-policy-reporter-kyverno-plugin-fips to version 1.3.1-r11.
- Update cleanstart kyverno-policy-reporter-kyverno-plugin-fips to version 1.4.2-r9.
- Update cleanstart linkerd2 to version 25.12.3-r1.
- Update cleanstart linkerd2 to version 26.1.4-r1.
- Update cleanstart linkerd2 to version 26.4.3-r0.
- Update cleanstart local-static-provisioner to version 2.8.0-r2.
- Update cleanstart mailpit to version 1.29.7-r0.
- Update cleanstart metacontroller to version 4.12.13-r0.
- Update cleanstart metacontroller to version 4.13.1-r0.
- Update cleanstart metacontroller to version 4.14.0-r0.
- Update cleanstart metacontroller to version 4.15.0-r0.
- Update cleanstart minio-operator-fips to version 5.0.19-r3.
- Update cleanstart minio-operator-fips to version 6.0.4-r11.
- Update cleanstart minio-operator-fips to version 7.1.1-r10.
- Update cleanstart modelmesh-runtime-adapter to version 0.10.0-r0.
- Update cleanstart modelmesh-runtime-adapter to version 0.11.2-r0.
- Update cleanstart modelmesh-runtime-adapter to version 0.9.0-r0.
- Update cleanstart mongodb to version 7.0.32-r0.
- Update cleanstart mongodb to version 8.0.20-r1.
- Update cleanstart mongodb to version 8.0.21-r0.
- Update cleanstart mongodb to version 8.2.6-r1.
- Update cleanstart mountpoint-s3-csi-driver to version 2.3.0-r1.
- Update cleanstart newrelic-infrastructure-agent to version 1.73.1-r0.
- Update cleanstart newrelic-nri-kube-events to version 2.16.4-r2.
- Update cleanstart newrelic-prometheus-configurator to version 2.9.0-r0.
- Update cleanstart nginx-prometheus-exporter to version 1.5.1-r2.
- Update cleanstart nginx-prometheus-exporter-fips to version 1.5.1-r1.
- Update cleanstart nvidia-container-toolkit to version 1.19.0-r0.
- Update cleanstart ollama to version 0.20.3-r1.
- Update cleanstart ollama-fips to version 0.18.3-r0.
- Update cleanstart ollama-fips to version 0.21.0-r1.
- Update cleanstart openbao-fips to version 2.1.1-r11.
- Update cleanstart openbao-fips to version 2.2.2-r9.
- Update cleanstart openbao-fips to version 2.3.3-r8.
- Update cleanstart openbao-fips to version 2.4.4-r8.
- Update cleanstart openbao-fips to version 2.5.3-r0.
- Update cleanstart opensearch-k8s-operator-fips to version 2.5.1-r4.
- Update cleanstart opensearch-k8s-operator-fips to version 2.6.1-r9.
- Update cleanstart opentofu-fips to version 1.11.6-r1.
- Update cleanstart opentofu-fips to version 1.7.10-r6.
- Update cleanstart opentofu-fips to version 1.8.11-r6.
- Update cleanstart opentofu-fips to version 1.9.4-r6.
- Update cleanstart paranoia to version 0.5.0-r1.
- Update cleanstart percona-xtradb-cluster-operator to version 1.19.1-r1.
- Update cleanstart pmm to version 3.5.0-r0.
- Update cleanstart prometheus to version 3.11.2-r0.
- Update cleanstart prometheus to version 3.5.2-r1.
- Update cleanstart prometheus-blackbox-exporter to version 0.28.0-r2.
- Update cleanstart prometheus-mysqld-exporter to version 0.15.0-r1.
- Update cleanstart prometheus-node-exporter to version 1.11.0-r0.
- Update cleanstart prometheus-node-exporter-fips to version 1.11.0-r0.
- Update cleanstart prometheus-operator to version 0.69.1-r1.
- Update cleanstart prometheus-operator to version 0.87.1-r3.
- Update cleanstart prometheus-redis-exporter-fips to version 1.78.0-r5.
- Update cleanstart prometheus-redis-exporter-fips to version 1.79.0-r5.
- Update cleanstart prometheus-redis-exporter-fips to version 1.81.0-r2.
- Update cleanstart prometheus-redis-exporter-fips to version 1.82.0-r2.
- Update cleanstart promxy-fips to version 0.0.93-r1.
- Update cleanstart rabbitmq-cluster-operator to version 2.18.0-r0.
- Update cleanstart rabbitmq-messaging-topology-operator to version 1.16.0-r0.
- Update cleanstart rabbitmq-messaging-topology-operator to version 1.19.1-r1.
- Update cleanstart rclone to version 1.69.0-r2.
- Update cleanstart restic to version 0.18.0-r0.
- Update cleanstart restic-fips to version 0.18.1-r5.
- Update cleanstart runc to version 1.4.2-r0.
- Update cleanstart sealed-secrets to version 0.33.1-r0.
- Update cleanstart sealed-secrets to version 0.34.0-r0.
- Update cleanstart sealed-secrets to version 0.36.6-r0.
- Update cleanstart spark-operator to version 2.1.1-r7.
- Update cleanstart spark-operator to version 2.2.1-r4.
- Update cleanstart spark-operator to version 2.5.0-r1.
- Update cleanstart spire-server to version 1.13.5-r1.
- Update cleanstart spire-server to version 1.14.5-r1.
- Update cleanstart spire-server-fips to version 1.14.5-r1.
- Update cleanstart stakater-reloader to version 1.1.0-r1.
- Update cleanstart step-issuer to version 0.10.2-r1.
- Update cleanstart step-issuer to version 0.9.11-r1.
- Update cleanstart tekton-pipelines to version 1.10.2-r1.
- Update cleanstart tekton-pipelines to version 1.11.0-r1.
- Update cleanstart tekton-pipelines to version 1.7.0-r1.
- Update cleanstart tekton-pipelines to version 1.9.2-r1.
- Update cleanstart tekton-pipelines-fips to version 1.10.2-r1.
- Update cleanstart tekton-pipelines-fips to version 1.9.2-r1.
- Update cleanstart temporal to version 1.5.1-r0.
- Update cleanstart temporal-server to version 1.31.0.153.1-r0.
- Update cleanstart terraform to version 1.14.8-r2.
- Update cleanstart terraform to version 1.15.1-r1.
- Update cleanstart terragrunt-fips to version 0.95.1-r5.
- Update cleanstart terragrunt-fips to version 0.96.1-r5.
- Update cleanstart terragrunt-fips to version 0.97.2-r7.
- Update cleanstart terragrunt-fips to version 0.98.0-r7.
- Update cleanstart tigera-operator to version 1.41.1-r0.
- Update cleanstart tigera-operator to version 1.42.0-r0.
- Update cleanstart timoni to version 0.25.2-r0.
- Update cleanstart trust-manager-fips to version 0.20.3-r2.
- Update cleanstart trust-manager-fips to version 0.21.1-r2.
- Update cleanstart vault to version 1.20.4-r4.
- Update cleanstart vault to version 1.21.4-r4.
- Update cleanstart vault to version 2.0.0-r1.
- Update cleanstart vault-csi-provider to version 1.7.0-r0.
- Update cleanstart vault-k8s to version 1.7.4-r0.
- Update cleanstart velero to version 1.17.2-r2.
- Update cleanstart velero-fips to version 1.18.0-r3.
- Update cleanstart velero-plugin-for-aws to version 1.12.2-r5.
- Update cleanstart velero-plugin-for-csi to version 0.7.1-r2.
- Update cleanstart velero-plugin-for-gcp-fips to version 1.14.0-r2.
- Update cleanstart velero-plugin-for-microsoft-azure-fips to version 1.14.0-r2.
- Update cleanstart victoriametrics-vmauth to version 1.138.0-r0.
- Update cleanstart wave to version 0.11.0-r1.
- Update cleanstart wave-fips to version 0.9.0-r3.
- Update cleanstart weaviate to version 1.35.17-r1.
- Update cleanstart weaviate to version 1.36.11-r1.
- Update cleanstart weaviate-fips to version 1.35.17-r1.
- Update cleanstart weaviate-fips to version 1.36.11-r0.
- Update cleanstart weaviate-fips to version 1.37.0-r0.
- Update cleanstart whereabouts to version 0.9.2-r2.
- Update cleanstart yunikorn-k8shim to version 1.7.0-r2.
- Update cleanstart yunikorn-k8shim-fips to version 1.7.0-r1.
- Update cleanstart yunikorn-web to version 1.7.0-r0.
- Update cleanstart yunikorn-web-fips to version 1.7.0-r0.
- Update cleanstart zot to version 2.1.13-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | apache-nifi |
< 2.10.0-r4 Fix: upgrade to 2.10.0-r4
|
| CleanStart | cleanstart | apko |
< 1.2.2-r1 Fix: upgrade to 1.2.2-r1
|
| CleanStart | cleanstart | argo-cd-fips |
< 3.0.23-r1 < 3.1.14-r1 Fix: upgrade to 3.0.23-r1
|
| CleanStart | cleanstart | argo-workflows |
< 4.0.5-r0 Fix: upgrade to 4.0.5-r0
|
| CleanStart | cleanstart | aws-eks-pod-identity-agent |
< 0.1.36-r0 Fix: upgrade to 0.1.36-r0
|
| CleanStart | cleanstart | aws-eks-pod-identity-agent-fips |
< 0.1.36-r0 Fix: upgrade to 0.1.36-r0
|
| CleanStart | cleanstart | aws-load-balancer-controller |
< 3.2.0-r0 Fix: upgrade to 3.2.0-r0
|
| CleanStart | cleanstart | aws-network-policy-agent |
< 1.3.2-r1 Fix: upgrade to 1.3.2-r1
|
| CleanStart | cleanstart | aws-network-policy-agent-fips |
< 1.3.2-r0 Fix: upgrade to 1.3.2-r0
|
| CleanStart | cleanstart | aws-privateca-issuer |
< 1.7.0-r0 Fix: upgrade to 1.7.0-r0
|
| CleanStart | cleanstart | aws-privateca-issuer-fips |
< 1.7.0-r1 Fix: upgrade to 1.7.0-r1
|
| CleanStart | cleanstart | azuredisk-csi-fips |
< 1.33.9-r1 Fix: upgrade to 1.33.9-r1
|
| CleanStart | cleanstart | cadvisor-fips |
< 0.55.1-r0 Fix: upgrade to 0.55.1-r0
|
| CleanStart | cleanstart | calico |
< 3.30.7-r1 Fix: upgrade to 3.30.7-r1
|
| CleanStart | cleanstart | cass-operator-fips |
< 1.30.0-r1 Fix: upgrade to 1.30.0-r1
|
| CleanStart | cleanstart | cert-manager |
< 1.17.4-r2 < 1.18.6-r1 < 1.20.0-r0 < 1.20.2-r0 Fix: upgrade to 1.17.4-r2
|
| CleanStart | cleanstart | cert-manager-cmctl-fips |
< 2.4.0-r3 Fix: upgrade to 2.4.0-r3
|
| CleanStart | cleanstart | cert-manager-webhook-pdns-fips |
< 3.2.3-r2 Fix: upgrade to 3.2.3-r2
|
| CleanStart | cleanstart | certificate-transparency-trillian-ctserver |
< 1.3.2-r2 Fix: upgrade to 1.3.2-r2
|
| CleanStart | cleanstart | certificate-transparency-trillian-ctserver-fips |
< 1.3.2-r0 Fix: upgrade to 1.3.2-r0
|
| CleanStart | cleanstart | cilium |
< 1.17.15-r0 < 1.18.9-r0 < 1.19.3-r0 Fix: upgrade to 1.17.15-r0
|
| CleanStart | cleanstart | cloudnative-pg-fips |
< 1.24.4-r5 < 1.25.4-r4 < 1.26.3-r3 Fix: upgrade to 1.24.4-r5
|
| CleanStart | cleanstart | configmap-reload |
< 0.15.0-r0 Fix: upgrade to 0.15.0-r0
|
| CleanStart | cleanstart | confluent-cp-docker-utils |
< 1.0.8-r1 Fix: upgrade to 1.0.8-r1
|
| CleanStart | cleanstart | confluent-kafka |
< 8.2.0-r2 Fix: upgrade to 8.2.0-r2
|
| CleanStart | cleanstart | cortex |
< 1.21.0-r2 Fix: upgrade to 1.21.0-r2
|
| CleanStart | cleanstart | cosign |
< 3.0.6-r1 Fix: upgrade to 3.0.6-r1
|
| CleanStart | cleanstart | dex |
< 2.45.1-r2 Fix: upgrade to 2.45.1-r2
|
| CleanStart | cleanstart | dex-fips |
< 2.43.1-r5 Fix: upgrade to 2.43.1-r5
|
| CleanStart | cleanstart | druid-exporter-fips |
< 0.10-r5 < 0.11-r6 < 0.9-r4 Fix: upgrade to 0.10-r5
|
| CleanStart | cleanstart | elastic-beats |
< 8.19.15-r2 < 9.2.8-r2 Fix: upgrade to 8.19.15-r2
|
| CleanStart | cleanstart | elastic-beats-fips |
< 9.2.8-r0 Fix: upgrade to 9.2.8-r0
|
| CleanStart | cleanstart | external-secrets |
< 2.2.0-r0 Fix: upgrade to 2.2.0-r0
|
| CleanStart | cleanstart | external-secrets-fips |
< 0.17.0-r2 < 2.2.0-r0 Fix: upgrade to 0.17.0-r2
|
| CleanStart | cleanstart | fluent-operator-fips |
< 3.4.0-r9 < 3.6.0-r5 < 3.7.0-r3 Fix: upgrade to 3.4.0-r9
|
| CleanStart | cleanstart | spark-operator |
< 2.3.0-r4 < 2.4.0-r4 < 2.1.1-r7 < 2.2.1-r4 < 2.5.0-r1 Fix: upgrade to 2.3.0-r4
|
| CleanStart | cleanstart | flux-notification-controller-fips |
< 1.5.0-r0 Fix: upgrade to 1.5.0-r0
|
| CleanStart | cleanstart | gostatsd |
< 28.3.0-r2 Fix: upgrade to 28.3.0-r2
|
| CleanStart | cleanstart | gptscript |
< 0.9.9-r1 Fix: upgrade to 0.9.9-r1
|
| CleanStart | cleanstart | helm |
< 4.0.5-r2 < 4.1.3-r0 Fix: upgrade to 4.0.5-r2
|
| CleanStart | cleanstart | helm-fips |
< 4.1.3-r0 Fix: upgrade to 4.1.3-r0
|
| CleanStart | cleanstart | helm-operator |
< 1.42.1-r0 < 1.42.2-r0 Fix: upgrade to 1.42.1-r0
|
| CleanStart | cleanstart | helm-operator-fips |
< 1.41.1-r2 Fix: upgrade to 1.41.1-r2
|
| CleanStart | cleanstart | istio |
< 1.28.5-r3 < 1.29.2-r1 Fix: upgrade to 1.28.5-r3
|
| CleanStart | cleanstart | istio-fips |
< 1.26.8-r3 < 1.27.9-r1 < 1.28.6-r0 Fix: upgrade to 1.26.8-r3
|
| CleanStart | cleanstart | istio-pilot-discovery-fips |
< 1.28.3-r1 Fix: upgrade to 1.28.3-r1
|
| CleanStart | cleanstart | k8ssandra-client-fips |
< 0.5.0-r11 < 0.6.4-r9 < 0.7.0-r7 Fix: upgrade to 0.5.0-r11
|
| CleanStart | cleanstart | k8ssandra-operator |
< 1.26.0-r0 Fix: upgrade to 1.26.0-r0
|
| CleanStart | cleanstart | k8ssandra-operator-fips |
< 1.29.0-r1 Fix: upgrade to 1.29.0-r1
|
| CleanStart | cleanstart | karpenter |
< 1.9.0-r1 Fix: upgrade to 1.9.0-r1
|
Showing 50 of 159. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | karpenter-fips |
< 1.9.0-r0 Fix: upgrade to 1.9.0-r0
|
| CleanStart | cleanstart | keda |
< 2.19.0-r3 Fix: upgrade to 2.19.0-r3
|
| CleanStart | cleanstart | keda-fips |
< 2.18.3-r3 Fix: upgrade to 2.18.3-r3
|
| CleanStart | cleanstart | kor |
< 0.3.8-r1 < 0.5.9-r1 < 0.6.7-r0 Fix: upgrade to 0.3.8-r1
|
| CleanStart | cleanstart | kserve |
< 0.16.0-r2 Fix: upgrade to 0.16.0-r2
|
| CleanStart | cleanstart | kserve-modelmesh-serving |
< 0.12.0-r2 Fix: upgrade to 0.12.0-r2
|
| CleanStart | cleanstart | kube-bench |
< 0.15.0-r1 Fix: upgrade to 0.15.0-r1
|
| CleanStart | cleanstart | kube-rbac-proxy |
< 0.20.2-r1 Fix: upgrade to 0.20.2-r1
|
| CleanStart | cleanstart | kube-rbac-proxy-fips |
< 0.20.2-r1 Fix: upgrade to 0.20.2-r1
|
| CleanStart | cleanstart | kube-state-metrics |
< 2.10.1-r1 < 2.15.0-r1 Fix: upgrade to 2.10.1-r1
|
| CleanStart | cleanstart | kube-state-metrics-fips |
< 2.18.0-r1 Fix: upgrade to 2.18.0-r1
|
| CleanStart | cleanstart | kube-vip |
< 1.1.0-r0 Fix: upgrade to 1.1.0-r0
|
| CleanStart | cleanstart | kubernetes |
< 1.33.11-r0 < 1.34.1-r5 < 1.34.7-r0 Fix: upgrade to 1.33.11-r0
|
| CleanStart | cleanstart | kubernetes-csi-driver-nfs-fips |
< 4.13.0-r3 Fix: upgrade to 4.13.0-r3
|
| CleanStart | cleanstart | kubernetes-csi-external-attacher |
< 4.10.0-r0 Fix: upgrade to 4.10.0-r0
|
| CleanStart | cleanstart | kubernetes-csi-external-attacher-fips |
< 4.10.0-r0 Fix: upgrade to 4.10.0-r0
|
| CleanStart | cleanstart | kubernetes-csi-external-provisioner-fips |
< 6.1.0-r4 Fix: upgrade to 6.1.0-r4
|
| CleanStart | cleanstart | kubernetes-csi-external-resizer |
< 2.0.0-r0 Fix: upgrade to 2.0.0-r0
|
| CleanStart | cleanstart | kubernetes-csi-external-resizer-fips |
< 2.0.0-r1 < 2.1.0-r1 Fix: upgrade to 2.0.0-r1
|
| CleanStart | cleanstart | kubernetes-csi-external-snapshotter-fips |
< 8.4.0-r4 Fix: upgrade to 8.4.0-r4
|
| CleanStart | cleanstart | kubernetes-csi-node-driver-registrar |
< 2.13.0-r0 Fix: upgrade to 2.13.0-r0
|
| CleanStart | cleanstart | kubernetes-csi-node-driver-registrar-fips |
< 2.16.0-r3 Fix: upgrade to 2.16.0-r3
|
| CleanStart | cleanstart | kubernetes-dashboard |
< 7.14.0-r1 Fix: upgrade to 7.14.0-r1
|
| CleanStart | cleanstart | kubernetes-dashboard-api |
< 1.14.0-r1 Fix: upgrade to 1.14.0-r1
|
| CleanStart | cleanstart | kubernetes-dashboard-api-fips |
< 1.14.0-r1 Fix: upgrade to 1.14.0-r1
|
| CleanStart | cleanstart | kubernetes-dashboard-auth |
< 1.4.0-r1 Fix: upgrade to 1.4.0-r1
|
| CleanStart | cleanstart | kubernetes-dashboard-auth-fips |
< 1.4.0-r2 Fix: upgrade to 1.4.0-r2
|
| CleanStart | cleanstart | kubernetes-dashboard-fips |
< 7.14.0-r0 Fix: upgrade to 7.14.0-r0
|
| CleanStart | cleanstart | kubernetes-dashboard-metrics-scraper |
< 1.2.2-r2 Fix: upgrade to 1.2.2-r2
|
| CleanStart | cleanstart | kubernetes-dashboard-metrics-scraper-fips |
< 1.2.2-r1 Fix: upgrade to 1.2.2-r1
|
| CleanStart | cleanstart | kubernetes-dashboard-web |
< 1.7.0-r0 Fix: upgrade to 1.7.0-r0
|
| CleanStart | cleanstart | kubernetes-event-exporter |
< 1.7-r1 Fix: upgrade to 1.7-r1
|
| CleanStart | cleanstart | kubernetes-event-exporter-fips |
< 1.7-r0 Fix: upgrade to 1.7-r0
|
| CleanStart | cleanstart | kubernetes-fips |
< 1.35.4-r0 Fix: upgrade to 1.35.4-r0
|
| CleanStart | cleanstart | kured |
< 1.20.0-r0 Fix: upgrade to 1.20.0-r0
|
| CleanStart | cleanstart | kustomize-fips |
< 5.8.1-r0 Fix: upgrade to 5.8.1-r0
|
| CleanStart | cleanstart | kyverno-fips |
< 1.16.4-r1 < 1.17.2-r1 Fix: upgrade to 1.16.4-r1
|
| CleanStart | cleanstart | kyverno-policy-reporter-fips |
< 3.4.2-r6 Fix: upgrade to 3.4.2-r6
|
| CleanStart | cleanstart | kyverno-policy-reporter-kyverno-plugin-fips |
< 1.3.1-r11 < 1.4.2-r9 Fix: upgrade to 1.3.1-r11
|
| CleanStart | cleanstart | linkerd2 |
< 25.12.3-r1 < 26.1.4-r1 < 26.4.3-r0 Fix: upgrade to 25.12.3-r1
|
| CleanStart | cleanstart | local-static-provisioner |
< 2.8.0-r2 Fix: upgrade to 2.8.0-r2
|
| CleanStart | cleanstart | mailpit |
< 1.29.7-r0 Fix: upgrade to 1.29.7-r0
|
| CleanStart | cleanstart | metacontroller |
< 4.12.13-r0 < 4.13.1-r0 < 4.14.0-r0 < 4.15.0-r0 Fix: upgrade to 4.12.13-r0
|
| CleanStart | cleanstart | minio-operator-fips |
< 5.0.19-r3 < 6.0.4-r11 < 7.1.1-r10 Fix: upgrade to 5.0.19-r3
|
| CleanStart | cleanstart | modelmesh-runtime-adapter |
< 0.10.0-r0 < 0.11.2-r0 < 0.9.0-r0 Fix: upgrade to 0.10.0-r0
|
| CleanStart | cleanstart | mongodb |
< 7.0.32-r0 < 8.0.20-r1 < 8.0.21-r0 < 8.2.6-r1 Fix: upgrade to 7.0.32-r0
|
| CleanStart | cleanstart | mountpoint-s3-csi-driver |
< 2.3.0-r1 Fix: upgrade to 2.3.0-r1
|
| CleanStart | cleanstart | newrelic-infrastructure-agent |
< 1.73.1-r0 Fix: upgrade to 1.73.1-r0
|
| CleanStart | cleanstart | newrelic-nri-kube-events |
< 2.16.4-r2 Fix: upgrade to 2.16.4-r2
|
| CleanStart | cleanstart | newrelic-prometheus-configurator |
< 2.9.0-r0 Fix: upgrade to 2.9.0-r0
|
| CleanStart | cleanstart | nginx-prometheus-exporter |
< 1.5.1-r2 Fix: upgrade to 1.5.1-r2
|
| CleanStart | cleanstart | nginx-prometheus-exporter-fips |
< 1.5.1-r1 Fix: upgrade to 1.5.1-r1
|
| CleanStart | cleanstart | nvidia-container-toolkit |
< 1.19.0-r0 Fix: upgrade to 1.19.0-r0
|
| CleanStart | cleanstart | ollama |
< 0.20.3-r1 Fix: upgrade to 0.20.3-r1
|
| CleanStart | cleanstart | ollama-fips |
< 0.18.3-r0 < 0.21.0-r1 Fix: upgrade to 0.18.3-r0
|
| CleanStart | cleanstart | openbao-fips |
< 2.1.1-r11 < 2.2.2-r9 < 2.3.3-r8 < 2.4.4-r8 < 2.5.3-r0 Fix: upgrade to 2.1.1-r11
|
| CleanStart | cleanstart | opensearch-k8s-operator-fips |
< 2.5.1-r4 < 2.6.1-r9 Fix: upgrade to 2.5.1-r4
|
| CleanStart | cleanstart | opentofu-fips |
< 1.11.6-r1 < 1.7.10-r6 < 1.8.11-r6 < 1.9.4-r6 Fix: upgrade to 1.11.6-r1
|
| CleanStart | cleanstart | paranoia |
< 0.5.0-r1 Fix: upgrade to 0.5.0-r1
|
| CleanStart | cleanstart | percona-xtradb-cluster-operator |
< 1.19.1-r1 Fix: upgrade to 1.19.1-r1
|
| CleanStart | cleanstart | pmm |
< 3.5.0-r0 Fix: upgrade to 3.5.0-r0
|
| CleanStart | cleanstart | prometheus |
< 3.11.2-r0 < 3.5.2-r1 Fix: upgrade to 3.11.2-r0
|
| CleanStart | cleanstart | prometheus-blackbox-exporter |
< 0.28.0-r2 Fix: upgrade to 0.28.0-r2
|
| CleanStart | cleanstart | prometheus-mysqld-exporter |
< 0.15.0-r1 Fix: upgrade to 0.15.0-r1
|
| CleanStart | cleanstart | prometheus-node-exporter |
< 1.11.0-r0 Fix: upgrade to 1.11.0-r0
|
| CleanStart | cleanstart | prometheus-node-exporter-fips |
< 1.11.0-r0 Fix: upgrade to 1.11.0-r0
|
| CleanStart | cleanstart | prometheus-operator |
< 0.69.1-r1 < 0.87.1-r3 Fix: upgrade to 0.69.1-r1
|
| CleanStart | cleanstart | prometheus-redis-exporter-fips |
< 1.78.0-r5 < 1.79.0-r5 < 1.81.0-r2 < 1.82.0-r2 Fix: upgrade to 1.78.0-r5
|
| CleanStart | cleanstart | promxy-fips |
< 0.0.93-r1 Fix: upgrade to 0.0.93-r1
|
| CleanStart | cleanstart | rabbitmq-cluster-operator |
< 2.18.0-r0 Fix: upgrade to 2.18.0-r0
|
| CleanStart | cleanstart | rabbitmq-messaging-topology-operator |
< 1.16.0-r0 < 1.19.1-r1 Fix: upgrade to 1.16.0-r0
|
| CleanStart | cleanstart | rclone |
< 1.69.0-r2 Fix: upgrade to 1.69.0-r2
|
| CleanStart | cleanstart | restic |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| CleanStart | cleanstart | restic-fips |
< 0.18.1-r5 Fix: upgrade to 0.18.1-r5
|
| CleanStart | cleanstart | runc |
< 1.4.2-r0 Fix: upgrade to 1.4.2-r0
|
| CleanStart | cleanstart | sealed-secrets |
< 0.33.1-r0 < 0.34.0-r0 < 0.36.6-r0 Fix: upgrade to 0.33.1-r0
|
| CleanStart | cleanstart | spire-server |
< 1.13.5-r1 < 1.14.5-r1 Fix: upgrade to 1.13.5-r1
|
| CleanStart | cleanstart | spire-server-fips |
< 1.14.5-r1 Fix: upgrade to 1.14.5-r1
|
| CleanStart | cleanstart | stakater-reloader |
< 1.1.0-r1 Fix: upgrade to 1.1.0-r1
|
| CleanStart | cleanstart | step-issuer |
< 0.10.2-r1 < 0.9.11-r1 Fix: upgrade to 0.10.2-r1
|
| CleanStart | cleanstart | tekton-pipelines |
< 1.10.2-r1 < 1.11.0-r1 < 1.7.0-r1 < 1.9.2-r1 Fix: upgrade to 1.10.2-r1
|
| CleanStart | cleanstart | tekton-pipelines-fips |
< 1.10.2-r1 < 1.9.2-r1 Fix: upgrade to 1.10.2-r1
|
| CleanStart | cleanstart | temporal |
< 1.5.1-r0 Fix: upgrade to 1.5.1-r0
|
| CleanStart | cleanstart | temporal-server |
< 1.31.0.153.1-r0 Fix: upgrade to 1.31.0.153.1-r0
|
| CleanStart | cleanstart | terraform |
< 1.14.8-r2 < 1.15.1-r1 Fix: upgrade to 1.14.8-r2
|
| CleanStart | cleanstart | terragrunt-fips |
< 0.95.1-r5 < 0.96.1-r5 < 0.97.2-r7 < 0.98.0-r7 Fix: upgrade to 0.95.1-r5
|
| CleanStart | cleanstart | tigera-operator |
< 1.41.1-r0 < 1.42.0-r0 Fix: upgrade to 1.41.1-r0
|
| CleanStart | cleanstart | timoni |
< 0.25.2-r0 Fix: upgrade to 0.25.2-r0
|
| CleanStart | cleanstart | trust-manager-fips |
< 0.20.3-r2 < 0.21.1-r2 Fix: upgrade to 0.20.3-r2
|
| CleanStart | cleanstart | vault |
< 1.20.4-r4 < 1.21.4-r4 < 2.0.0-r1 Fix: upgrade to 1.20.4-r4
|
| CleanStart | cleanstart | vault-csi-provider |
< 1.7.0-r0 Fix: upgrade to 1.7.0-r0
|
| CleanStart | cleanstart | vault-k8s |
< 1.7.4-r0 Fix: upgrade to 1.7.4-r0
|
| CleanStart | cleanstart | velero |
< 1.17.2-r2 Fix: upgrade to 1.17.2-r2
|
| CleanStart | cleanstart | velero-fips |
< 1.18.0-r3 Fix: upgrade to 1.18.0-r3
|
| CleanStart | cleanstart | velero-plugin-for-aws |
< 1.12.2-r5 Fix: upgrade to 1.12.2-r5
|
| CleanStart | cleanstart | velero-plugin-for-csi |
< 0.7.1-r2 Fix: upgrade to 0.7.1-r2
|
| CleanStart | cleanstart | velero-plugin-for-gcp-fips |
< 1.14.0-r2 Fix: upgrade to 1.14.0-r2
|
| CleanStart | cleanstart | velero-plugin-for-microsoft-azure-fips |
< 1.14.0-r2 Fix: upgrade to 1.14.0-r2
|
| CleanStart | cleanstart | victoriametrics-vmauth |
< 1.138.0-r0 Fix: upgrade to 1.138.0-r0
|
| CleanStart | cleanstart | wave |
< 0.11.0-r1 Fix: upgrade to 0.11.0-r1
|
| CleanStart | cleanstart | wave-fips |
< 0.9.0-r3 Fix: upgrade to 0.9.0-r3
|
| CleanStart | cleanstart | weaviate |
< 1.35.17-r1 < 1.36.11-r1 Fix: upgrade to 1.35.17-r1
|
| CleanStart | cleanstart | weaviate-fips |
< 1.35.17-r1 < 1.36.11-r0 < 1.37.0-r0 Fix: upgrade to 1.35.17-r1
|
| CleanStart | cleanstart | whereabouts |
< 0.9.2-r2 Fix: upgrade to 0.9.2-r2
|
| CleanStart | cleanstart | yunikorn-k8shim |
< 1.7.0-r2 Fix: upgrade to 1.7.0-r2
|
| CleanStart | cleanstart | yunikorn-k8shim-fips |
< 1.7.0-r1 Fix: upgrade to 1.7.0-r1
|
| CleanStart | cleanstart | yunikorn-web |
< 1.7.0-r0 Fix: upgrade to 1.7.0-r0
|
| CleanStart | cleanstart | yunikorn-web-fips |
< 1.7.0-r0 Fix: upgrade to 1.7.0-r0
|
| CleanStart | cleanstart | zot |
< 2.1.13-r2 Fix: upgrade to 2.1.13-r2
|
Original advisory text
Security fix for CVE-2026-39823 applied in: apache-nifi 2.10.0-r4, apko 1.2.2-r1, argo-cd-fips 3.0.23-r1, argo-cd-fips 3.1.14-r1, argo-workflows 4.0.5-r0, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-load-balancer-controller 3.2.0-r0, aws-network-policy-agent 1.3.2-r1, aws-network-policy-agent-fips 1.3.2-r0, aws-privateca-issuer 1.7.0-r0, aws-privateca-issuer-fips 1.7.0-r1, azuredisk-csi-fips 1.33.9-r1, cadvisor-fips 0.55.1-r0, calico 3.30.7-r1, cass-operator-fips 1.30.0-r1, cert-manager 1.17.4-r2, cert-manager 1.18.6-r1, cert-manager 1.20.0-r0, cert-manager 1.20.2-r0, cert-manager-cmctl-fips 2.4.0-r3, cert-manager-webhook-pdns-fips 3.2.3-r2, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cilium 1.17.15-r0, cilium 1.18.9-r0, cilium 1.19.3-r0, cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.26.3-r3, configmap-reload 0.15.0-r0, confluent-cp-docker-utils 1.0.8-r1, confluent-kafka 8.2.0-r2, cortex 1.21.0-r2, cosign 3.0.6-r1, dex 2.45.1-r2, dex-fips 2.43.1-r5, druid-exporter-fips 0.10-r5, druid-exporter-fips 0.11-r6, druid-exporter-fips 0.9-r4, elastic-beats 8.19.15-r2, elastic-beats 9.2.8-r2, elastic-beats-fips 9.2.8-r0, external-secrets 2.2.0-r0, external-secrets-fips 0.17.0-r2, external-secrets-fips 2.2.0-r0, fluent-operator-fips 3.4.0-r9, fluent-operator-fips 3.6.0-r5, fluent-operator-fips 3.7.0-r3, flux-notification-controller-fips 1.5.0-r0, gostatsd 28.3.0-r2, gptscript 0.9.9-r1, helm 4.0.5-r2, helm 4.1.3-r0, helm-fips 4.1.3-r0, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, istio 1.28.5-r3, istio 1.29.2-r1, istio-fips 1.26.8-r3, istio-fips 1.27.9-r1, istio-fips 1.28.6-r0, istio-pilot-discovery-fips 1.28.3-r1, k8ssandra-client-fips 0.5.0-r11, k8ssandra-client-fips 0.6.4-r9, k8ssandra-client-fips 0.7.0-r7, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.29.0-r1, karpenter 1.9.0-r1, karpenter-fips 1.9.0-r0, keda 2.19.0-r3, keda-fips 2.18.3-r3, kor 0.3.8-r1, kor 0.5.9-r1, kor 0.6.7-r0, kserve 0.16.0-r2, kserve-modelmesh-serving 0.12.0-r2, kube-bench 0.15.0-r1, kube-rbac-proxy 0.20.2-r1, kube-rbac-proxy-fips 0.20.2-r1, kube-state-metrics 2.10.1-r1, kube-state-metrics 2.15.0-r1, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.1.0-r0, kubernetes 1.33.11-r0, kubernetes 1.34.1-r5, kubernetes 1.34.7-r0, kubernetes-csi-driver-nfs-fips 4.13.0-r3, kubernetes-csi-external-attacher 4.10.0-r0, kubernetes-csi-external-attacher-fips 4.10.0-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r4, kubernetes-csi-external-resizer 2.0.0-r0, kubernetes-csi-external-resizer-fips 2.0.0-r1, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-csi-external-snapshotter-fips 8.4.0-r4, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-csi-node-driver-registrar-fips 2.16.0-r3, kubernetes-dashboard 7.14.0-r1, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubernetes-dashboard-auth 1.4.0-r1, kubernetes-dashboard-auth-fips 1.4.0-r2, kubernetes-dashboard-fips 7.14.0-r0, kubernetes-dashboard-metrics-scraper 1.2.2-r2, kubernetes-dashboard-metrics-scraper-fips 1.2.2-r1, kubernetes-dashboard-web 1.7.0-r0, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, kubernetes-fips 1.35.4-r0, kured 1.20.0-r0, kustomize-fips 5.8.1-r0, kyverno-fips 1.16.4-r1, kyverno-fips 1.17.2-r1, kyverno-policy-reporter-fips 3.4.2-r6, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r11, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r9, linkerd2 25.12.3-r1, linkerd2 26.1.4-r1, linkerd2 26.4.3-r0, local-static-provisioner 2.8.0-r2, mailpit 1.29.7-r0, metacontroller 4.12.13-r0, metacontroller 4.13.1-r0, metacontroller 4.14.0-r0, metacontroller 4.15.0-r0, minio-operator-fips 5.0.19-r3, minio-operator-fips 6.0.4-r11, minio-operator-fips 7.1.1-r10, modelmesh-runtime-adapter 0.10.0-r0, modelmesh-runtime-adapter 0.11.2-r0, modelmesh-runtime-adapter 0.9.0-r0, mongodb 7.0.32-r0, mongodb 8.0.20-r1, mongodb 8.0.21-r0, mongodb 8.2.6-r1, mountpoint-s3-csi-driver 2.3.0-r1, newrelic-infrastructure-agent 1.73.1-r0, newrelic-nri-kube-events 2.16.4-r2, newrelic-prometheus-configurator 2.9.0-r0, nginx-prometheus-exporter 1.5.1-r2, nginx-prometheus-exporter-fips 1.5.1-r1, nvidia-container-toolkit 1.19.0-r0, ollama 0.20.3-r1, ollama-fips 0.18.3-r0, ollama-fips 0.21.0-r1, openbao-fips 2.1.1-r11, openbao-fips 2.2.2-r9, openbao-fips 2.3.3-r8, openbao-fips 2.4.4-r8, openbao-fips 2.5.3-r0, opensearch-k8s-operator-fips 2.5.1-r4, opensearch-k8s-operator-fips 2.6.1-r9, opentofu-fips 1.11.6-r1, opentofu-fips 1.7.10-r6, opentofu-fips 1.8.11-r6, opentofu-fips 1.9.4-r6, paranoia 0.5.0-r1, percona-xtradb-cluster-operator 1.19.1-r1, pmm 3.5.0-r0, prometheus 3.11.2-r0, prometheus 3.5.2-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mysqld-exporter 0.15.0-r1, prometheus-node-exporter 1.11.0-r0, prometheus-node-exporter-fips 1.11.0-r0, prometheus-operator 0.69.1-r1, prometheus-operator 0.87.1-r3, prometheus-redis-exporter-fips 1.78.0-r5, prometheus-redis-exporter-fips 1.79.0-r5, prometheus-redis-exporter-fips 1.81.0-r2, prometheus-redis-exporter-fips 1.82.0-r2, promxy-fips 0.0.93-r1, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rabbitmq-messaging-topology-operator 1.19.1-r1, rclone 1.69.0-r2, restic 0.18.0-r0, restic-fips 0.18.1-r5, runc 1.4.2-r0, sealed-secrets 0.33.1-r0, sealed-secrets 0.34.0-r0, sealed-secrets 0.36.6-r0, spark-operator 2.1.1-r7, spark-operator 2.2.1-r4, spark-operator 2.3.0-r4, spark-operator 2.4.0-r4, spark-operator 2.5.0-r1, spire-server 1.13.5-r1, spire-server 1.14.5-r1, spire-server-fips 1.14.5-r1, stakater-reloader 1.1.0-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, tekton-pipelines 1.10.2-r1, tekton-pipelines 1.11.0-r1, tekton-pipelines 1.7.0-r1, tekton-pipelines 1.9.2-r1, tekton-pipelines-fips 1.10.2-r1, tekton-pipelines-fips 1.9.2-r1, temporal 1.5.1-r0, temporal-server 1.31.0.153.1-r0, terraform 1.14.8-r2, terraform 1.15.1-r1, terragrunt-fips 0.95.1-r5, terragrunt-fips 0.96.1-r5, terragrunt-fips 0.97.2-r7, terragrunt-fips 0.98.0-r7, tigera-operator 1.41.1-r0, tigera-operator 1.42.0-r0, timoni 0.25.2-r0, trust-manager-fips 0.20.3-r2, trust-manager-fips 0.21.1-r2, vault 1.20.4-r4, vault 1.21.4-r4, vault 2.0.0-r1, vault-csi-provider 1.7.0-r0, vault-k8s 1.7.4-r0, velero 1.17.2-r2, velero-fips 1.18.0-r3, velero-plugin-for-aws 1.12.2-r5, velero-plugin-for-csi 0.7.1-r2, velero-plugin-for-gcp-fips 1.14.0-r2, velero-plugin-for-microsoft-azure-fips 1.14.0-r2, victoriametrics-vmauth 1.138.0-r0, wave 0.11.0-r1, wave-fips 0.9.0-r3, weaviate 1.35.17-r1, weaviate 1.36.11-r1, weaviate-fips 1.35.17-r1, weaviate-fips 1.36.11-r0, weaviate-fips 1.37.0-r0, whereabouts 0.9.2-r2, yunikorn-k8shim 1.7.0-r2, yunikorn-k8shim-fips 1.7.0-r1, yunikorn-web 1.7.0-r0, yunikorn-web-fips 1.7.0-r0, zot 2.1.13-r2
CVE-2026-39823 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.
Timeline
Published18 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-FZ40980 · OSV
Track software like this
Free during beta