CLEANSTART-2026-PM59896 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.41.1-r0, 1.41.1-r1

Multiple security vulnerabilities affect the helm-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, otel-cli, crossplane-provider-azure-storage, cloud-provider-gcp-cloud-controller-manager, dagdotdev, newrelic-infrastructure-agent, cloud-sql-proxy, crossplane-provider-aws-iam, coredns, linkerd2, crossplane-provider-family-azure, juicefs-csi-driver,...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, otel-cli, crossplane-provider-azure-storage, cloud-provider-gcp-cloud-controller-manager, dagdotdev, newrelic-infrastructure-agent, cloud-sql-proxy, crossplane-provider-aws-iam, coredns, linkerd2, crossplane-provider-family-azure, juicefs-csi-driver,...

CLEANSTART-2026-NS41924 Within HostnameError

Multiple security vulnerabilities affect the helm-operator package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: kargo, zarf, helm-docs, flux-helm-controller, flux, chartmuseum, envoy-gateway, trivy-operator, flux-source-controller, linkerd2, k8ssandra-client, cilium-cli, eksctl, rancher-fleet, k9s, kubescape, istio, k8sgpt, helm-operator, kots, zot, cluster-api-helm-controller...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: kargo, zarf, helm-docs, flux-helm-controller, flux, chartmuseum, envoy-gateway, trivy-operator, flux-source-controller, linkerd2, k8ssandra-client, cilium-cli, eksctl, rancher-fleet, k9s, kubescape, istio, k8sgpt, helm-operator, kots, zot, cluster-api-helm-controller...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: kargo, zarf, helm-docs, flux-helm-controller, flux, chartmuseum, envoy-gateway, trivy-operator, flux-source-controller, linkerd2, k8ssandra-client, cilium-cli, eksctl, rancher-fleet, k9s, kubescape, istio, k8sgpt, helm-operator, kots, zot, cluster-api-helm-controller...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: kargo, zarf, helm-docs, flux-helm-controller, flux, chartmuseum, envoy-gateway, trivy-operator, flux-source-controller, linkerd2, k8ssandra-client, cilium-cli, eksctl, rancher-fleet, k9s, kubescape, istio, k8sgpt, helm-operator, kots, zot, cluster-api-helm-controller...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: supercronic, polaris-fips, teleport, eck-operator, kube-logging-operator-custom-runner, gatus, mkcert, nemo, gitlab-cng, elvish, gosu-fips, containerd, falcosidekick, kbld, azurefile-csi, helm-mapkubeapis, src, multus-cni, hydra-fips, flux, kubebuilder,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: zarf, helm-docs, flux-helm-controller, flux, chartmuseum, flux-source-controller, k8ssandra-client, tw, cilium-cli, eksctl, k9s, kubescape, helm-operator, kots, zot, cluster-api-helm-controller, helm-push, pluto, cert-manager-cmctl, trivy, chart-testing, rancher-helm...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: zarf, helm-docs, flux-helm-controller, flux, chartmuseum, flux-source-controller, k8ssandra-client, tw, cilium-cli, eksctl, k9s, kubescape, helm-operator, kots, zot, cluster-api-helm-controller, helm-push, pluto, cert-manager-cmctl, trivy, chart-testing, rancher-helm...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: zarf, helm-docs, flux-helm-controller, flux, chartmuseum, flux-source-controller, k8ssandra-client, tw, cilium-cli, eksctl, k9s, kubescape, helm-operator, kots, zot, cluster-api-helm-controller, helm-push, pluto, cert-manager-cmctl, trivy, chart-testing, rancher-helm...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: zarf, helm-docs, flux-helm-controller, flux, chartmuseum, flux-source-controller, k8ssandra-client, tw, cilium-cli, eksctl, k9s, kubescape, helm-operator, kots, zot, cluster-api-helm-controller, helm-push, pluto, cert-manager-cmctl, trivy, chart-testing, rancher-helm...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: flux-fips, consul-k8s, chartmuseum-fips, kuma, pluto, harbor-fips, cluster-api-helm-controller-fips, flux-helm-controller, tw, flux-source-controller-fips, cert-manager-cmctl, k9s, cert-manager-cmctl-fips, trivy-fips, helm-docs, eksctl, flux, cilium-cli, chart-testin...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: flux-fips, consul-k8s, chartmuseum-fips, kuma, pluto, harbor-fips, cluster-api-helm-controller-fips, flux-helm-controller, tw, flux-source-controller-fips, cert-manager-cmctl, k9s, cert-manager-cmctl-fips, trivy-fips, helm-docs, eksctl, flux, cilium-cli, chart-testin...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: kubevela, spegel, dagger, kargo, zarf, ctop, newrelic-infrastructure-agent, nerdctl, fuse-overlayfs-snapshotter, flux-helm-controller, xeol, chartmuseum, envoy-gateway, k3s, flux-source-controller, linkerd2, k8ssandra-client, osv-scanner, cilium-cli, docker-cli-build...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: kubevela, spegel, dagger, kargo, zarf, ctop, newrelic-infrastructure-agent, nerdctl, fuse-overlayfs-snapshotter, flux-helm-controller, xeol, chartmuseum, envoy-gateway, k3s, flux-source-controller, linkerd2, k8ssandra-client, osv-scanner, cilium-cli, docker-cli-build...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: sonobuoy, mongo-tools, cert-exporter, gops, kube-rbac-proxy, s5cmd, dagger, kubeflow-pipelines, nri-haproxy, wire-go, speedtest-go, newrelic-infrastructure-agent, newrelic-fluent-bit-output, newrelic-prometheus-configurator, aws-flb-cloudwatch,...