GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-portal, osv-scanner, fleet-server, kubernetes-csi-driver-nfs, crossplane-provider-aws-elbv2-fips, crossplane-provider-azure-network, crossplane-provider-aws-iam, gitlab-operator-fips, node-problem-detector, kuberay-operator, gitlab-pages,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kiali, k8sgpt-operator, postgres-operator, argo-workflows, docker-cli-buildx, sonobuoy, falcoctl, trivy-operator, argo-rollouts, aws-node-termination-handler, cluster-api, linkerd2, headlamp, kube-arangodb, rancher-fleet, istio, rancher-agent, argo-cd, cilium-cli, k3...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kiali, k8sgpt-operator, postgres-operator, argo-workflows, docker-cli-buildx, sonobuoy, falcoctl, trivy-operator, argo-rollouts, aws-node-termination-handler, cluster-api, linkerd2, headlamp, kube-arangodb, rancher-fleet, istio, rancher-agent, argo-cd, cilium-cli, k3...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: rancher-agent, postgres-operator, terraform-provider-kubernetes-fips, verticadb-operator-fips, k8sgpt, istio, cloudnative-pg, cluster-api-fips, neuvector, plugin-barman-cloud, cert-manager-istio-csr, kubescape-server-fips, cloudbeat-fips, trivy-operator-fips,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: rancher-agent, postgres-operator, terraform-provider-kubernetes-fips, verticadb-operator-fips, k8sgpt, istio, cloudnative-pg, cluster-api-fips, neuvector, plugin-barman-cloud, cert-manager-istio-csr, kubescape-server-fips, cloudbeat-fips, trivy-operator-fips,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: helm-push, flux-source-controller, trivy-operator, helm-set-status, linkerd2, headlamp, kube-arangodb, rancher-fleet, chart-testing, istio, cilium-cli, kuma, trivy, kubescape, cerbos, consul-k8s, tw, harbor, tigera-operator, k9s, zot, envoy-gateway, eksctl, helm,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm-push, flux-source-controller, trivy-operator, helm-set-status, linkerd2, headlamp, kube-arangodb, rancher-fleet, chart-testing, istio, cilium-cli, kuma, trivy, kubescape, cerbos, consul-k8s, tw, harbor, tigera-operator, k9s, zot, envoy-gateway, eksctl, helm,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, pluto, helm-exporter, rancher-fleet-fips, zot, cluster-api-helm-controller, envoy-gateway, helm-operator, istio, linkerd2-fips, flux-source-controller-fips, kubescape, headlamp-fips, helm-set-status, flux-fips, harbor, jfrog-cli,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, apko, cis-operator, cluster-api-provider-vsphere, argo-workflows, cloud-provider-aws, cloud-provider-vsphere, kubernetes-csi-driver-nfs, terraform-provider-time, kubernetes-csi-livenessprobe, timoni, argo-rollouts, aws-node-termination-handler, syft,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, docker-credential-acr-env, gobuster, argo-rollouts, buf, multus-cni, go-licenses, slsa-verifier, mcp-grafana, rook, certificate-transparency, sbomqs, kine, nfs-subdir-external-provisioner, helm, metacontroller, terraform-provider-pagerduty,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, docker-credential-acr-env, gobuster, argo-rollouts, buf, multus-cni, go-licenses, slsa-verifier, mcp-grafana, rook, certificate-transparency, sbomqs, kine, kubeflow-katib, nfs-subdir-external-provisioner, helm, metacontroller,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: podinfo-fips, cis-operator, crossplane, osv-scanner, fleet-server, databricks-cli, rancher-helm, aws-fsx-csi-driver, virt-controller-fips, virt-controller, kubernetes-csi-driver-nfs, wal-g, gitlab-operator-fips, trillian, virt-api, azurefile-csi-fips, trivy-operator,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: crossplane, osv-scanner, rancher-helm, kubernetes-csi-driver-nfs, wal-g, gitlab-operator-fips, azurefile-csi-fips, trivy-operator, gitlab-pages, keda, elastic-agent, task-fips, cloudflared-fips, gitlab-operator, libnvidia-container-fips, neuvector-scanner-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: crossplane, osv-scanner, rancher-helm, kubernetes-csi-driver-nfs, wal-g, gitlab-operator-fips, azurefile-csi-fips, trivy-operator, gitlab-pages, keda, elastic-agent, task-fips, cloudflared-fips, gitlab-operator, libnvidia-container-fips, neuvector-scanner-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: go-jsonnet, postgres-operator, mountpoint-s3-csi-driver, manifest-tool, virt-controller-fips, velero-plugin-for-csi-fips, keda, task-fips, langfuse-fips, libnvidia-container-fips, render-template-fips, opensearch-k8s-operator, neuvector-scanner-fips, howdy-yall,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: podinfo-fips, postgres-operator, cis-operator, crossplane, osv-scanner, fleet-server, databricks-cli, rancher-helm, aws-fsx-csi-driver, manifest-tool, mountpoint-s3-csi-driver, virt-controller-fips, victoriametrics, virt-controller, kubernetes-csi-driver-nfs, wal-g,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: podinfo-fips, postgres-operator, cis-operator, crossplane, osv-scanner, fleet-server, databricks-cli, rancher-helm, aws-fsx-csi-driver, manifest-tool, mountpoint-s3-csi-driver, virt-controller-fips, victoriametrics, virt-controller, kubernetes-csi-driver-nfs, wal-g,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: podinfo-fips, postgres-operator, cis-operator, crossplane, osv-scanner, fleet-server, databricks-cli, rancher-helm, aws-fsx-csi-driver, manifest-tool, mountpoint-s3-csi-driver, virt-controller-fips, victoriametrics, virt-controller, kubernetes-csi-driver-nfs, wal-g,...

CLEANSTART-2026-SF31652 Security fixes for CVE-2025-61730, CVE-2026-24051, CVE-2026-27139, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.22.2-r0, 1.22.2-r1

Multiple security vulnerabilities affect the consul-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XO65991 Security fixes for CVE-2025-61730, CVE-2026-24051, CVE-2026-27139, ghsa-9h8m-3fm2-qjrq applied in versions: 1.22.2-r0

Multiple security vulnerabilities affect the consul-fips package. These issues are resolved in later releases. See references for individual vulnerability details...