PT-2026-101870 · Cleanstart · Cosign+11

Published

2026-09-18

·

Updated

2026-09-18

CVSS v3.1

5.8

Medium

VectorAV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
ghsa-fcv2-xgw5-pqxf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CLEANSTART-2026-UR24822

Affected Products

Cosign
Kubescape
Kyverno-Fips
Rekor-Backfill-Index
Sigstore-Scaffolding
Sigstore-Scaffolding-Fips
Spice-Server
Spire-Server-Fips
Tekton-Chains
Tekton-Chains-Fips
Tekton Pipelines
Tkn-Fips