Vulnerability Database

RHSA-2026:70585

Red Hat:openshift:4.17::el8/cri-o
Red Hat:openshift:4.17::el8/cri-o-debuginfo
Red Hat:openshift:4.17::el8/cri-o-debugsource
Red Hat:openshift:4.17::el8/cri-tools
Red Hat:openshift:4.17::el8/cri-tools-debuginfo
... 29 more

Red Hat Security Advisory: OpenShift Container Platform 4.17.58 packages and security update 3 days ago

Fix available
Severity - 8.2 (High)

CLEANSTART-2026-PU41775

CleanStart/consul

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To... 4 days ago

Fix available
Severity - 7.5 (High)

CLEANSTART-2026-OJ68067

CleanStart/containerd

Fix available
Severity - 7.5 (High)

MINI-7x76-5c77-8248

MinimOS/consul-1.21

See record for full details 6 days ago

Fix available

MINI-rgf2-mmv6-f4qh

MinimOS/consul-fips-1.21

See record for full details 6 days ago

Fix available

CLEANSTART-2026-NH53620

CleanStart/loki

Fix available
Severity - 9.8 (Critical)

RHSA-2026:67856

Red Hat:openshift:4.15::el8/cri-o
Red Hat:openshift:4.15::el8/cri-o-debuginfo
Red Hat:openshift:4.15::el8/cri-o-debugsource
Red Hat:openshift:4.15::el9/cri-o
Red Hat:openshift:4.15::el9/cri-o-debuginfo
... 1 more

Red Hat Security Advisory: OpenShift Container Platform 4.15.69 packages and security update 25 Sep

Fix available
Severity - 7.8 (High)

RHSA-2026:67836

Red Hat:openshift:4.14::el8/cri-o
Red Hat:openshift:4.14::el8/cri-o-debuginfo
Red Hat:openshift:4.14::el8/cri-o-debugsource
Red Hat:openshift:4.14::el9/cri-o
Red Hat:openshift:4.14::el9/cri-o-debuginfo
... 1 more

Red Hat Security Advisory: OpenShift Container Platform 4.14.74 packages and security update 25 Sep

Fix available
Severity - 7.8 (High)

openSUSE-SU-2026:21918-1

openSUSE:Leap 16.0/warewulf4

Security update for warewulf4 18 Sep

Fix available

CLEANSTART-2026-FW04887

CleanStart/argo-cd
CleanStart/argo-cd-fips
CleanStart/argo-workflows
CleanStart/boring-registry
CleanStart/boring-registry-fips
... 71 more

Security fix for CVE-2026-34986 applied in: argo-cd 3.0.23-r2, argo-cd 3.2.7-r2, argo-cd 3.3.5-r0, argo-cd-fips 3.1.14-r0, argo-cd-fips 3.2.9-r0, argo-workflows 4.0.4-r0, boring-registry 0.17.0-r0, boring-registry-fips 0.17.0-r0, cert-manager 1.17.4-r0, cert-manager 1.18.6-r0, cert-manager 1.19.2-r2, cert-manager 1.20.0-r0, cert-manager 1.20.1-r1, cert-manager-fips 1.17.4-r1, cert-manager-fips 1.19.4-r0, cloudprober 0.13.9-r0, cloudprober 0.14.2-r0, cloudprober-fips 0.13.9-r0, cloudprober-fips 0.14.2-r0, consul-fips 1.22.2-r2, cortex 1.20.1-r1, cortex 1.21.1-r4, cosign 2.4.3-r0, cosign 2.5.3-r0, dex 2.42.1-r6, dex 2.43.1-r3, dex 2.44.0-r1, dex 2.45.1-r1, external-secrets 2.2.0-r0, external-secrets-fips 0.17.0-r2, external-secrets-fips 2.2.0-r0, flux-kustomize-controller-fips 1.8.5-r0, forecastle 1.0.159-r1, fulcio 1.5.1-r0, fulcio-fips 1.5.1-r2, fulcio-fips 1.6.6-r2, fulcio-fips 1.7.1-r1, gitlab-runner 18.11.1-r0, gomplate 4.3.3-r0, grafana-alloy 1.13.1-r1, grafana-alloy 1.14.2-r1, grafana-alloy 1.15.0-r0, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0, grafana-alloy-fips 1.16.0-r0, grafana-mimir-fips 3.0.4-r1, grafana-mimir-fips 3.0.5-r0, helm-operator-fips 1.41.1-r2, istio 1.27.9-r0, istio 1.28.5-r3, istio 1.29.1-r1, istio-fips 1.25.5-r5, istio-fips 1.26.8-r2, istio-fips 1.27.8-r3, istio-fips 1.27.9-r0, istio-fips 1.28.5-r3, istio-fips 1.29.1-r2, istio-pilot-discovery 1.28.3-r1, istio-pilot-discovery-fips 1.28.3-r1, jitsucom-bulker 2.10.0-r0, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, keda 2.17.2-r2, keda 2.19.0-r2, keda-fips 2.18.3-r3, kserve 0.16.0-r2, kube-rbac-proxy 0.20.2-r1, kube-rbac-proxy-fips 0.20.2-r1, kyverno-fips 1.13.6-r10, kyverno-fips 1.16.3-r5, kyverno-fips 1.17.1-r4, kyverno-policy-reporter-fips 3.3.3-r5, kyverno-policy-reporter-fips 3.4.2-r5, kyverno-policy-reporter-fips 3.5.0-r5, kyverno-policy-reporter-fips 3.7.3-r1, litestream 0.5.14-r2, loki 3.6.10-r0, melange 0.45.4-r0, melange 0.46.1-r0, melange 0.47.0-r0, melange 0.48.1-r0, openbao-fips 2.1.1-r9, openbao-fips 2.2.2-r7, openbao-fips 2.4.4-r5, openbao-fips 2.5.1-r1, openbao-fips 2.5.2-r0, opentelemetry-collector-contrib 0.149.0-r0, opentelemetry-collector-contrib 0.150.0-r0, opentofu-fips 1.10.9-r5, opentofu-fips 1.11.5-r4, opentofu-fips 1.11.6-r0, opentofu-fips 1.7.10-r4, opentofu-fips 1.8.11-r4, opentofu-fips 1.9.4-r4, policy-controller 0.15.1-r0, policy-controller-fips 0.15.1-r0, prometheus-mongodb-exporter 0.47.2-r1, prometheus-mongodb-exporter-fips 0.47.2-r1, rabbitmq-messaging-topology-operator 1.16.0-r0, rabbitmq-messaging-topology-operator 1.19.1-r0, rekor-fips 1.5.1-r0, restic 0.18.0-r0, restic-fips 0.18.1-r4, rundeck 6.0.0-r0, spire-server 1.13.5-r0, spire-server 1.14.5-r0, spire-server-fips 1.14.5-r0, step 0.29.0-r0, step 0.30.2-r2, step-ca 0.27.5-r0, step-cli 0.27.5-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, syft 1.42.4-r0, tekton-pipelines 1.10.2-r0, tekton-pipelines 1.11.0-r0, tekton-pipelines 1.7.0-r0, tekton-pipelines 1.9.2-r0, tekton-pipelines-fips 1.10.2-r0, tekton-pipelines-fips 1.11.0-r0, tekton-pipelines-fips 1.7.0-r0, tekton-pipelines-fips 1.9.2-r0, tempo 2.10.3-r0, tempo 2.8.3-r1, tempo 2.9.1-r0, tempo-fips 2.10.3-r0, tempo-fips 2.8.3-r1, tempo-fips 2.9.1-r1, temporal 1.5.1-r0, temporal-server 1.29.6-r0, temporal-server 1.30.4-r0, temporal-server 1.31.0.153.3-r0, temporal-server-fips 1.29.6-r0, temporal-server-fips 1.31.0.153.1-r0, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.97.2-r3, terragrunt-fips 0.98.0-r3, terragrunt-fips 0.99.5-r0, tkn 0.42.2-r1, tkn-fips 0.44.2-r0, trillian 1.7.3-r1, vault 1.20.4-r1, vault 1.21.4-r1, vault-csi-provider 1.7.0-r0, velero 1.17.2-r2, velero-fips 1.17.2-r4, velero-plugin-for-gcp-fips 1.13.2-r0, velero-plugin-for-gcp-fips 1.13.2-r2, weaviate 1.36.9-r0 18 Sep

Fix available

RHSA-2026:66385

Red Hat:openshift:4.18::el8/cri-o
Red Hat:openshift:4.18::el8/cri-o-debuginfo
Red Hat:openshift:4.18::el8/cri-o-debugsource
Red Hat:openshift:4.18::el9/cri-o
Red Hat:openshift:4.18::el9/cri-o-debuginfo
... 1 more

Red Hat Security Advisory: OpenShift Container Platform 4.18.55 packages and security update 18 Sep

Fix available
Severity - 7.8 (High)

RHSA-2026:65838

Red Hat:openshift:4.13::el8/containernetworking-plugins
Red Hat:openshift:4.13::el8/containernetworking-plugins-debuginfo
Red Hat:openshift:4.13::el8/containernetworking-plugins-debugsource
Red Hat:openshift:4.13::el8/cri-o
Red Hat:openshift:4.13::el8/cri-o-debuginfo
... 24 more

Red Hat Security Advisory: OpenShift Container Platform 4.13.71 packages and security update 18 Sep

Fix available
Severity - 7.8 (High)

RHSA-2026:65906

Red Hat:openshift:4.12::el8/cri-o
Red Hat:openshift:4.12::el8/cri-o-debuginfo
Red Hat:openshift:4.12::el8/cri-o-debugsource

Red Hat Security Advisory: OpenShift Container Platform 4.12.98 packages and security update 17 Sep

Fix available
Severity - 7.8 (High)

SUSE-SU-2026:4212-1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS/distribution
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS/distribution
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS/distribution
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS/distribution
SUSE:Linux Enterprise Module for Containers 15 SP7/distribution
... 6 more

Security update for distribution 16 Sep

Fix available

SUSE-SU-2026:4209-1

SUSE:Linux Enterprise Module for Containers 15 SP7/containerized-data-importer

Security update for containerized-data-importer 16 Sep

Fix available

RHSA-2026:62548

Red Hat:openshift:4.16::el8/cri-o
Red Hat:openshift:4.16::el8/cri-o-debuginfo
Red Hat:openshift:4.16::el8/cri-o-debugsource
Red Hat:openshift:4.16::el9/cri-o
Red Hat:openshift:4.16::el9/cri-o-debuginfo
... 1 more

Red Hat Security Advisory: OpenShift Container Platform 4.16.70 packages and security update 10 Sep

Fix available
Severity - 7.8 (High)

Vulnerabilities