GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, rancher-fleet-fips, flux-source-controller-fips, flux-fips, flux-source-controller, zarf-fips, helm-push, flux, helm-diff, gitlab-operator, cert-manager-cmctl, zarf, gitlab-operator-fips, cilium-cli, rancher-fleet, kuma, kots, helm-diff-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kubescape, consul-k8s, cluster-api-helm-controller, vcluster-fips, opentofu, k8ssandra-client, jfrog-cli, kyverno, tigera-operator, rancher, kube-mgmt, trivy-fips, kyverno-notation-aws-fips, crossplane-fips, cloudbeat, eksctl, k9s-fips, oras-fips,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: opa, tflint, grafana-mimir, cert-manager-cmctl, opentelemetry-collector, terraform-docs, gomplate, spire-server, guac, grpc-health-probe, kargo, ferretdb, kwok, opentelemetry-collector-contrib, rqlite, kube-rbac-proxy, smarter-device-manager, melange, k8sgpt, sops,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, chart-testing, kubescape, eksctl, helm-operator, flux-source-controller, flux, helm-docs, k9s, cluster-api-helm-controller, zarf, k8ssandra-client, rancher-helm, cilium-cli, pluto, flux-helm-controller, kots, trivy, helm-push, tw, chartmuseum, zot...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-push, cert-manager-cmctl, zarf, rancher-fleet, kots, kuma, flux-source-controller, flux...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-push, cert-manager-cmctl, zarf, rancher-fleet, kots, kuma, flux-source-controller, flux...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, envoy-gateway, chart-testing, eksctl, helm-operator, kargo, flux-source-controller, helm-docs, k9s, istio, k8sgpt, cerbos, cluster-api-helm-controller, zarf, k8ssandra-client, rancher-helm, cilium-cli, pluto, flux-helm-controller, rancher-fleet,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: docker-compose, dask-gateway, crossplane-provider-aws-memorydb, kubernetes-dashboard-api, atlantis, gcp-compute-persistent-disk-csi-driver, argo-rollouts, terraform-provider-azapi, kubernetes-csi-external-health-monitor, falco-no-driver, kuma, mariadb-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: helm-set-status, litefs, dask-gateway, terraform-docs, kubernetes-dashboard-api, chart-testing, gcp-compute-persistent-disk-csi-driver, helm-operator, guac, falco-no-driver, kuma, ferretdb, amass, vault-k8s, stakater-reloader, wgcf, bank-vaults, croc,...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: grafana-mimir, dask-gateway, terraform-docs, crossplane, direnv, configmap-reload, argo-rollouts, controller-gen, mariadb-operator, nri-prometheus, minio-object-browser, croc, tigera-operator, kafka-proxy, otel-cli, kserve-modelmesh-serving, nri-nginx,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: grafana-mimir, dask-gateway, terraform-docs, crossplane, direnv, configmap-reload, argo-rollouts, controller-gen, mariadb-operator, nri-prometheus, minio-object-browser, croc, tigera-operator, kafka-proxy, otel-cli, kserve-modelmesh-serving, nri-nginx,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, crossplane, gomplate, atlantis, argo-rollouts, guac, k9s, cluster-api, boring-registry, openbao, crossplane-provider-azure-managedidentity, kyverno-notation-aws, scorecard, actions-runner-controller, tfsec, opentofu,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, crossplane, gomplate, atlantis, argo-rollouts, guac, k9s, cluster-api, boring-registry, openbao, crossplane-provider-azure-managedidentity, kyverno-notation-aws, scorecard, actions-runner-controller, tfsec, opentofu,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: rclone-fips, grype-db, crossplane-provider-azure-managedidentity, reports-server, kubescape, crossplane-provider-aws-iam, melange, grafana-alloy, external-secrets-operator, gitlab-runner, sops, opentofu, gitaly, pulumi-language-yaml, atlantis-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, opentelemetry-operator, percona-server-mongodb-operator-fips, percona-xtradb-cluster-operator-fips, cert-manager-istio-csr, cert-manager-webhook-pdns, aws-privateca-issuer-fips, mariadb-operator-fips, cert-manager-csi-driver,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, cert-manager-cmctl, step-issuer, aws-privateca-issuer, percona-server-mongodb-operator, cert-manager-csi-driver, cert-manager-istio-csr, cert-manager-webhook-pdns, mariadb-operator...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, cert-manager-cmctl, step-issuer, aws-privateca-issuer, percona-server-mongodb-operator, cert-manager-csi-driver, cert-manager-istio-csr, cert-manager-webhook-pdns, mariadb-operator...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: helm-set-status, bom, aws-flb-kinesis, cert-manager-cmctl, dask-gateway, kubernetes-dashboard-api, redka, opensearch-k8s-operator, src, steampipe, traefik, bento, eksctl, spire-server, helm-operator, falco-no-driver, flux-notification-controller, ferretdb,...