GO-2026-5566 vulnerabilities

Vulnerabilities for packages: zarf, rancher-fleet, kuma, helm-push, flux-fips, flux-source-controller-fips, helm-diff, rancher-fleet-fips, cert-manager-cmctl-fips, helm-diff-fips, flux-source-controller, cert-manager-cmctl, gitlab-operator-fips, flux, kots, gitlab-operator, cilium-cli, zarf-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-push, oras-fips, kubescape-operator, cloudbeat, falcoctl, gitlab-operator, gogatekeeper, consul-k8s-fips, kyverno-notation-aws, ocm-cli-fips, ocm-kubernetes-controller, oras, kyverno-fips, kyverno-notation-aws-fips, argocd-image-updater, jfrog-cli,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: minio, guac, k8sgpt-operator, pulumi-language-dotnet, opentelemetry-collector, falcosidekick, sigstore-scaffolding, vcluster, spegel, kubernetes-csi-driver-hostpath, restic, rqlite, kaniko, spire-server, zot, fulcio, cilium-cli, grpc-health-probe, gomplate, opa, temp...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: flux, chart-testing, pluto, zot, rancher-helm, kubescape, cilium-cli, cluster-api-helm-controller, helm-push, zarf, k9s, flux-source-controller, k8ssandra-client, helm-operator, eksctl, trivy, chartmuseum, helm-docs, cert-manager-cmctl, kots, tw, flux-helm-controller...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, zarf, cilium-cli, kots, flux-source-controller, helm-push, flux, rancher-fleet, kuma...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, zarf, cilium-cli, kots, flux-source-controller, helm-push, flux, rancher-fleet, kuma...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: linkerd2, chart-testing, pluto, cerbos, zot, rancher-helm, envoy-gateway, cilium-cli, cluster-api-helm-controller, helm-push, zarf, k9s, flux-source-controller, k8sgpt, k8ssandra-client, istio, helm-operator, eksctl, trivy, chartmuseum, helm-docs, cert-manager-cmctl,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubernetes-csi-external-health-monitor, kubernetes-csi-driver-nfs, podinfo, sftpgo-plugin-auth, argo-rollouts, prometheus, secrets-store-csi-driver, kubernetes-csi-driver-hostpath, restic, syft, crossplane-provider-aws-route53, runc, sqlexporter,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k8sgateway, sonobuoy, guac, kubeflow-katib, kuberlr, nri-nginx, xeol, esbuild, kbld, kapp, kubernetes-csi-driver-nfs, podinfo, sftpgo-plugin-auth, secrets-store-csi-driver, src-fingerprint, restic, runc, spire-server, neuvector-sigstore-interface,...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: xeol, kafkaexporter, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, prometheus, kubewatch, migrate, cloud-provider-azure, helm-push, nsc, apache-exporter, dfc, kubernetes-csi-external-attacher, step-kms-plugin, litestream, mockery, kubernetes-replicator,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: xeol, kafkaexporter, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, prometheus, kubewatch, migrate, cloud-provider-azure, helm-push, nsc, apache-exporter, dfc, kubernetes-csi-external-attacher, step-kms-plugin, litestream, mockery, kubernetes-replicator,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: trufflehog, guac, xeol, grype, witness, argo-rollouts, src-fingerprint, syft, argo-workflows, crossplane-provider-aws-route53, wal-g, actions-runner-controller, helm-push, crossplane-provider-aws-sns, crossplane-provider-keycloak, trivy-operator, argocd-image-updater...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: trufflehog, guac, xeol, grype, witness, argo-rollouts, src-fingerprint, syft, argo-workflows, crossplane-provider-aws-route53, wal-g, actions-runner-controller, helm-push, crossplane-provider-aws-sns, crossplane-provider-keycloak, trivy-operator, argocd-image-updater...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, grype, pulumi-language-java, helm-push, reports-server, crossplane-provider-aws-memorydb-fips, boring-registry, argo-events-fips, cloudbeat, gitlab-operator, docker-fips, kubevela, terraform-provider-databricks, kyverno-notation-aws,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, cert-manager-webhook-pdns-fips, cert-manager-istio-csr, gitlab-operator-fips, gitlab-operator, mariadb-operator, cert-manager-csi-driver-fips, percona-xtradb-cluster-operator, opentelemetry-operator, cert-manager-cmctl-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, opentelemetry-operator, step-issuer, mariadb-operator, percona-server-mongodb-operator, cert-manager-istio-csr, cert-manager-csi-driver, aws-privateca-issuer, cert-manager-webhook-pdns...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, opentelemetry-operator, step-issuer, mariadb-operator, percona-server-mongodb-operator, cert-manager-istio-csr, cert-manager-csi-driver, aws-privateca-issuer, cert-manager-webhook-pdns...