CLEANSTART-2026-RN21890 Security fix for CVE-2020-29652 applied in: cfssl 1.5.0-r1

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100542

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101579

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100517

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101089

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101191

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100405

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it

SummaryRepo under test: https://github.com/Netflix/lemurPUT /api/1/certificates//revoke authorizes the caller against the Lemur database row creator == current user, or CertificatePermission over the row's roles rather than the underlying CA-side certificate identity. Separately, POST...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: cloudnative-pg, protoc-gen-go-grpc, whereabouts, fulcio, linkerd2-proxy-init, kapp, restic, gogatekeeper, gotestsum, grpcurl, apko, nri-prometheus, step-ca, sftpgo-plugin-kms, tflint, amass, xcaddy, hubble-ui, stakater-reloader, trivy, sonobuoy,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kube-vip-cloud-provider, kubeflow-pipelines, gitness, blobfuse2, crossplane-provider-aws-ec2, manifest-tool, aws-flb-kinesis, mods, whereabouts, descheduler, octo-sts, fuse-overlayfs-snapshotter, slsa-verifier, langfuse, tfsec, pgpool2exporter, clickhouse-operator,...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: cloudnative-pg, crossplane-provider-aws-ec2, whereabouts, octo-sts, fulcio, victoriametrics-cluster, kapp, restic, grpcurl, syft, apko, crossplane-provider-aws, nri-prometheus, step-ca, rqlite, tailscale, sftpgo-plugin-kms, tflint, cadvisor, amass, kubescape,...

GO-2024-2888 vulnerabilities

Vulnerabilities for packages: protoc-gen-go-grpc, octo-sts, fulcio, restic, vt-cli, grpcurl, syft, crossplane-provider-aws, nri-prometheus, step-ca, tailscale, tflint, cadvisor, amass, kubescape, xcaddy, hubble-ui, up, trivy, sonobuoy, helm-operator, caddy, newrelic-infrastructure-agent,...

CLEANSTART-2026-NG63443 Security fixes in cfssl 1.5.0-r1

Package cfssl version 1.5.0-r1 fixes 81 vulnerabilities: CVE-2020-29652, CVE-2021-31525, CVE-2021-33194, CVE-2021-38561, CVE-2021-43565...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, gomplate-fips, hubble-ui-backend-fips, doppler-kubernetes-operator, vault-fips, witness, nats-server-fips, task, kargo, knative-eventing-fips, sftpgo-plugin-eventsearch, certificate-transparency, gatus,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, gomplate-fips, hubble-ui-backend-fips, doppler-kubernetes-operator, vault-fips, witness, nats-server-fips, task, kargo, knative-eventing-fips, sftpgo-plugin-eventsearch, certificate-transparency, gatus,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, gomplate-fips, hubble-ui-backend-fips, doppler-kubernetes-operator, vault-fips, witness, nats-server-fips, task, kargo, knative-eventing-fips, sftpgo-plugin-eventsearch, certificate-transparency, gatus,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, gomplate-fips, nats-server-fips, sftpgo-plugin-eventsearch, neuvector-dbgen-fips, sonobuoy-fips, goose-fips, flux-source-controller-fips, flux-image-automation-controller, falcoctl,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: kube-vip-cloud-provider, kubeflow-pipelines, gitness, blobfuse2, crossplane-provider-aws-ec2, manifest-tool, aws-flb-kinesis, mods, whereabouts, descheduler, kubernetes-csi-driver-hostpath, octo-sts, fuse-overlayfs-snapshotter, slsa-verifier, tfsec, pgpool2exporter,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, protoc-gen-go-grpc, whereabouts, octo-sts, linkerd2-proxy-init, kapp, restic, gogatekeeper, grpcurl, sftpgo-plugin-kms, amass, xcaddy, hubble-ui, stakater-reloader, sonobuoy, helm-operator, pgtimetable, custom-pod-autoscaler, bank-vaults,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: kube-vip-cloud-provider, kubeflow-pipelines, gitness, blobfuse2, crossplane-provider-aws-ec2, manifest-tool, aws-flb-kinesis, mods, whereabouts, descheduler, kubernetes-csi-driver-hostpath, octo-sts, fuse-overlayfs-snapshotter, slsa-verifier, tfsec, pgpool2exporter,...