Vulnerability Database

CLEANSTART-2026-ON59462

CleanStart/argo-cd
CleanStart/argo-cd-fips
CleanStart/argo-events
CleanStart/argo-rollouts
CleanStart/argo-rollouts-fips
... 4 more

Security fix for ghsa-gxhx-2686-5h9g applied in: argo-cd 3.2.12-r0, argo-cd 3.2.7-r2, argo-cd 3.3.11-r0, argo-cd 3.3.5-r0, argo-cd-fips 3.0.23-r1, argo-cd-fips 3.1.14-r2, argo-events 1.9.10-r1, argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, atlantis-fips 0.38.0-r1, atlantis-fips 0.39.0-r1, atlantis-fips 0.40.0-r1, atlantis-fips 0.41.0-r1, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, kubewatch 2.12.0-r0 18 Sep

Fix available

CGA-h9j9-6wrm-9c4f

Chainguard/argo-cd-3.3-compat
Wolfi/argo-cd-3.3-compat

See record for full details 15 Sep

No fix available
Severity - 4.8 (Medium)

MINI-28q8-qvhf-jxw3

MinimOS/kratos

See record for full details 17 Jul

Fix available

MINI-vcmw-pqrf-r4jj

MinimOS/kratos-fips

See record for full details 17 Jul

Fix available

GO-2026-5410

Go/github.com/slack-go/slack

SecretsVerifier accepts empty signing secret without precondition in github.com/slack-go/slack 07 Jul

Fix available

MINI-c93c-xj5q-27qh

MinimOS/atlantis-fips