GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, kuma, rancher-fleet, cilium-cli, zarf-fips, helm-push, flux-source-controller, flux-source-controller-fips, helm-diff-fips, cert-manager-cmctl, kots, gitlab-operator-fips, zarf, flux-fips, rancher-fleet-fips, helm-diff, gitlab-operator, flux...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: gatekeeper, kubescape-server-fips, crossplane-fips, helm-operator, oras-fips, rancher-fleet, conftest-fips, envoy-gateway-fips, kyverno-fips, cilium-cli, k9s-fips, zarf, trivy, ocm-cli, k8ssandra-client-fips, opentofu, helm-operator-fips, kubescape-operator, kyverno,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: grafana-agent-operator, dagger, sigstore-scaffolding, spicedb, conftest, k3s, kubernetes-csi-external-provisioner, ksops, step-ca, terragrunt, k8sgpt-operator, zarf, trivy, grafana-mimir, pulumi-language-dotnet, smarter-device-manager, opentelemetry-collector, guac,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: pluto, k9s, zarf, trivy, tw, zot, cilium-cli, kubescape, flux-source-controller, helm-operator, kots, flux-helm-controller, cert-manager-cmctl, chart-testing, flux, k8ssandra-client, eksctl, helm-push, chartmuseum, rancher-helm, helm-docs, cluster-api-helm-controller...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, helm-push, kuma, rancher-fleet, zarf, cilium-cli, cert-manager-cmctl, flux...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, helm-push, kuma, rancher-fleet, zarf, cilium-cli, cert-manager-cmctl, flux...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cerbos, pluto, istio, k9s, zarf, trivy, tw, zot, kargo, rancher-fleet, cilium-cli, k8sgpt, flux-source-controller, helm-operator, kots, flux-helm-controller, cert-manager-cmctl, chart-testing, linkerd2, k8ssandra-client, eksctl, envoy-gateway, helm-push, chartmuseum,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: cerbos, dask-gateway, cilium-envoy, external-dns, kubernetes-csi-external-health-monitor, kubernetes-csi-external-snapshotter, memcached-exporter, step-ca, sftpgo, opencost, kserve-modelmesh-serving, trino, rook, argo-rollouts, kapp-controller, sqlexporter, undock,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, dask-gateway, external-dns, nri-haproxy, kine, nri-couchbase, sbomqs, chisel, custom-pod-autoscaler, kapp, govulncheck, opencost, kserve-modelmesh-serving, crossplane-provider-sql, frp, src-fingerprint, vault-k8s, vault-secrets-webhook,...

CLEANSTART-2026-JL48383 Security fixes in cert-manager-cmctl-fips 2.5.0-r1

Package cert-manager-cmctl-fips version 2.5.0-r1 fixes 7 vulnerabilities: ghsa-jxpm-75mh-9fp7, ghsa-8xwf-rjm4-xvhv, ghsa-xf85-363p-868w, ghsa-vh4v-2xq2-g5cg, CVE-2026-50151...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, juicefs-csi-driver, chisel, istio, direnv, portieris, verticadb-operator, crossplane-provider-family-azure, atlantis, etcd, hubble, cadvisor, kubernetes-dashboard-api, nginx-prometheus-exporter, redpanda, sftpgo-plugin-auth,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, juicefs-csi-driver, chisel, istio, direnv, portieris, verticadb-operator, crossplane-provider-family-azure, atlantis, etcd, hubble, cadvisor, kubernetes-dashboard-api, nginx-prometheus-exporter, redpanda, sftpgo-plugin-auth,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, cerbos, rclone, src-fingerprint, argo-rollouts, zot, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, crossplane-provider-family-azure, terraform-provider-azuread, atlantis, gomplate, boring-registry, wal-g,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, cerbos, rclone, src-fingerprint, argo-rollouts, zot, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, crossplane-provider-family-azure, terraform-provider-azuread, atlantis, gomplate, boring-registry, wal-g,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: reports-server, flux-helm-controller, crossplane-provider-azure-storage, pulumi-kubernetes-operator, flux-image-automation-controller, kubescape-server-fips, crossplane-provider-aws-iam-fips, commercial-grafana, kubevela-fips, melange, syft, crossplane-fips, guac,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, mariadb-operator-fips, cert-manager-google-cas-issuer, cert-manager-csi-driver, gitlab-operator, step-issuer-fips, cert-manager-istio-csr, percona-xtradb-cluster-operator, cert-manager-openshift-routes-fips, opentelemetry-operator-fip...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-csi-driver, mariadb-operator, cert-manager-istio-csr, step-issuer, cert-manager-cmctl, opentelemetry-operator, percona-server-mongodb-operator...