GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux-fips, cilium-cli, flux-source-controller, flux-source-controller-fips, gitlab-operator-fips, helm-push, flux, gitlab-operator, kuma, rancher-fleet, zarf, cert-manager-cmctl-fips, kots, rancher-fleet-fips, helm-diff-fips, cert-manager-cmctl, zarf-fips, helm-diff...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: ratify-fips, helm-exporter, headlamp-fips, rancher-fleet-fips, linkerd2-fips, drone-fips, k8ssandra-client, helm-operator-fips, rancher-helm, kyverno, chartmuseum-fips, gatekeeper, ratify, falcoctl-fips, manifest-tool, kgateway-fips, opentofu, gitlab-operator-fips,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: cilium-cli, flux, cert-manager-cmctl, kots, trivy, cluster-api-helm-controller, k8ssandra-client, helm-operator, eksctl, k9s, helm-docs, chartmuseum, zarf, flux-source-controller, tw, kubescape, zot, chart-testing, flux-helm-controller, pluto, helm-push, rancher-helm...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kwok, kubernetes-csi-external-provisioner, kargo, tempo, grafana-agent-operator, opentelemetry-collector-contrib, cilium-cli, ksops, restic, cert-manager-cmctl, grafana-mimir, opentelemetry-collector, dbmate, rqlite, temporal, guac, k3s, kots, melange, terragrunt,...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: kots, rancher-fleet, cilium-cli, zarf, kuma, helm-push, flux-source-controller, flux, cert-manager-cmctl...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: kots, rancher-fleet, cilium-cli, zarf, kuma, helm-push, flux-source-controller, flux, cert-manager-cmctl...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: kargo, cilium-cli, cert-manager-cmctl, kots, trivy, rancher-fleet, cluster-api-helm-controller, k8ssandra-client, helm-operator, eksctl, k9s, helm-docs, chartmuseum, envoy-gateway, zarf, flux-source-controller, linkerd2, cerbos, tw, zot, istio, chart-testing,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, buildah, tempo, dask-gateway, pulumi, rook, tfsec, verticadb-operator, ksops, pulumi-language-java, tetragon, argocd-image-updater, cri-tools, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, dkron, knative-eventing, kots,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kubernetes-dashboard-api, nri-f5, dask-gateway, tfsec, rancher-system-agent, verticadb-operator, cilium-cli, ksops, kubernetes-dashboard-metrics-scraper, nri-postgresql, yace, mountpoint-s3-csi-driver, tetragon, crossplane-provider-aws-firehose...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-f5, pulumi, rook, cert-manager-csi-driver, cilium-cli, kubernetes-dashboard-metrics-scraper, cis-operator, flux, argocd-image-updater, polaris, vertical-pod-autoscaler, filebrowser, cluster-api-ipam-provider-in-cluster, custom-pod-autoscaler-operator,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: nri-f5, pulumi, rook, cert-manager-csi-driver, cilium-cli, kubernetes-dashboard-metrics-scraper, cis-operator, flux, argocd-image-updater, polaris, vertical-pod-autoscaler, filebrowser, cluster-api-ipam-provider-in-cluster, custom-pod-autoscaler-operator,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: pulumi, tfsec, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, kots, skaffold, pulumi-language-dotnet, crossplane-provider-aws-elasticache, crossplane, crossplane-provider-aws-memoryd...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: pulumi, tfsec, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, kots, skaffold, pulumi-language-dotnet, crossplane-provider-aws-elasticache, crossplane, crossplane-provider-aws-memoryd...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, ratify-fips, terraform-fips, apko-fips, docker, omni-fips, crossplane-provider-aws-firehose, gitsign, rancher-fleet-fips, commercial-grafana, terraform, flux-source-controller, crossplane-provider-aws-sns, gitaly-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator-fips, cert-manager-google-cas-issuer, mariadb-operator, cert-manager-csi-driver, cert-manager-istio-csr, step-issuer-fips, cert-manager-istio-csr-fips, aws-privateca-issuer-fips, aws-privateca-issuer, cert-manager-webhook-pdns, step-issuer,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, cert-manager-csi-driver, step-issuer, aws-privateca-issuer, cert-manager-istio-csr, cert-manager-cmctl, opentelemetry-operator, percona-server-mongodb-operator, mariadb-operator...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, cert-manager-csi-driver, step-issuer, aws-privateca-issuer, cert-manager-istio-csr, cert-manager-cmctl, opentelemetry-operator, percona-server-mongodb-operator, mariadb-operator...