GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, crossplane-provider-aws-s3, influxd, crossplane-provider-sql-fips, cert-manager-cmctl-fips, crossplane-provider-aws-servicediscovery, crossplane-provider-gitlab-fips, slsa-verifier, crossplane-provider-aws-appflow-fips,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: sonobuoy, postgres-operator, consul-k8s, cilium, rancher-fleet, terraform-provider-kubernetes, redis-operator, infinispan-operator, emissary, eksctl, k8ssandra-client, trivy-operator, argo-cd, cloudnative-pg, jitsucom-bulker, kubernetes, kubescape, istio, rancher,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: sonobuoy, postgres-operator, consul-k8s, cilium, rancher-fleet, terraform-provider-kubernetes, redis-operator, infinispan-operator, emissary, eksctl, k8ssandra-client, trivy-operator, argo-cd, cloudnative-pg, jitsucom-bulker, kubernetes, kubescape, istio, rancher,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, argo-workflows-fips, cluster-api, k8sgpt-operator, kargo, k8s-driver-manager-fips, cloudbeat, sonobuoy, kpt, kubernetes, velero, percona-server-mongodb-operator, trivy-operator, zarf-fips, kubevela-fips, eksctl, neuvector-fips, consul-k8...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, argo-workflows-fips, cluster-api, k8sgpt-operator, kargo, k8s-driver-manager-fips, cloudbeat, sonobuoy, kpt, kubernetes, velero, percona-server-mongodb-operator, trivy-operator, zarf-fips, kubevela-fips, eksctl, neuvector-fips, consul-k8...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: consul-k8s, rancher-fleet, helm-operator, eksctl, k8ssandra-client, trivy-operator, kubescape, cerbos, istio, flux-source-controller, chartmuseum, zarf, helm, zot, k9s, kuma, pluto, tw, flux, kots, cilium-cli, helm-docs, cert-manager-cmctl, helm-push, trivy,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: consul-k8s, rancher-fleet, helm-operator, eksctl, k8ssandra-client, trivy-operator, kubescape, cerbos, istio, flux-source-controller, chartmuseum, zarf, helm, zot, k9s, kuma, pluto, tw, flux, kots, cilium-cli, helm-docs, cert-manager-cmctl, helm-push, trivy,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cerbos, helm-push, teleport, k9s, kubescape-server, helm-operator, cert-manager-cmctl-fips, flux-source-controller-fips, pluto-fips, envoy-gateway-fips, cluster-api-helm-controller-fips, flux-fips, chaos-mesh-fips, gitlab-operator-fips, k8ssandra-client-fips, kots,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: yunikorn-web, mc, spegel, yunikorn-k8shim, docker-credential-ecr-login, timescaledb-parallel-copy, splunk-otel-collector, podman, sbomqs, logstash-exporter, polaris, go, prometheus-operator, kubernetes-csi-external-health-monitor, newrelic-fluent-bit-output,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: yunikorn-web, mc, spegel, yunikorn-k8shim, docker-credential-ecr-login, timescaledb-parallel-copy, splunk-otel-collector, podman, sbomqs, logstash-exporter, polaris, go, prometheus-operator, kubernetes-csi-external-health-monitor, newrelic-fluent-bit-output,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, task, aws-flb-firehose, kubernetes-csi-node-driver-registrar, mc, mattermost, rancher-fleet, spegel, yunikorn-k8shim, step, cadvisor, gitaly, flux-image-automation-controller, flux-image-reflector-controller, rancher,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, aws-node-termination-handler, certificate-transparency-fips, sftpgo-plugin-geoipfilter, ceph-csi-operator-fips, gomplate-fips, influxd, crossplane-provider-sql-fips, longhorn-backing-image-manager,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: influxd, gomplate-fips, cert-manager-cmctl-fips, gomplate, slsa-verifier, timoni, pulumi-language-java, buildkite-agent-fips, xeol, sonobuoy, terraform-fips, kubernetes, kind, minio-fips, cephcsi, commercial-expanso-edge, crane, gitlab-operator, syncthing,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: influxd, gomplate-fips, cert-manager-cmctl-fips, gomplate, slsa-verifier, timoni, pulumi-language-java, buildkite-agent-fips, xeol, sonobuoy, terraform-fips, kubernetes, kind, minio-fips, cephcsi, commercial-expanso-edge, crane, gitlab-operator, syncthing,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, croc, aws-node-termination-handler, certificate-transparency-fips, sftpgo-plugin-geoipfilter, ceph-csi-operator-fips, gomplate-fips, influxd, crossplane-provider-sql-fips, longhorn-backing-image-manager,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, croc, aws-node-termination-handler, certificate-transparency-fips, sftpgo-plugin-geoipfilter, ceph-csi-operator-fips, gomplate-fips, influxd, crossplane-provider-sql-fips, longhorn-backing-image-manager,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, croc, aws-node-termination-handler, certificate-transparency-fips, sftpgo-plugin-geoipfilter, ceph-csi-operator-fips, gomplate-fips, influxd, crossplane-provider-sql-fips, longhorn-backing-image-manager,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql-fips, rancher-security-scan, crossplane-provider-aws-servicediscovery, timoni, crossplane-provider-aws-ec2-fips, minio-fips, cephcsi, crane, crossplane-provider-aws-sqs-fips, crossplane-provider-aws-wafv2-fips, kafkaexporter, nri-rabbitmq-fips...

CLEANSTART-2026-SF31652 Security fixes for CVE-2025-61730, CVE-2026-24051, CVE-2026-27139, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.22.2-r0, 1.22.2-r1

Multiple security vulnerabilities affect the consul-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XO65991 Security fixes for CVE-2025-61730, CVE-2026-24051, CVE-2026-27139, ghsa-9h8m-3fm2-qjrq applied in versions: 1.22.2-r0

Multiple security vulnerabilities affect the consul-fips package. These issues are resolved in later releases. See references for individual vulnerability details...