GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: harvester-fips, kubevela-fips, helmfile, docker-compose, steampipe, kgateway-fips, docker-compose-fips, trivy-operator, eksctl, trivy, tigera-operator, k3s, grype-db, helm, newrelic-infrastructure-agent, crossplane, dagger, kubescape-operator, envoy-gateway,...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: polaris-fips, descheduler-fips, metrics-agent-fips, prometheus-redis-exporter, fq, temporal, hugo-fips, gitea, node-feature-discovery-fips, dagger, go-md2man, crossplane-provider-azure, opa, terraform, kube-vip-fips, slsa-verifier, cass-operator-fips-no-pvc-delete,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, prometheus-nats-exporter, prometheus-redis-exporter, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, temporal, crossplane, crossplane-provider-aws-cloudfront, dagger, cosign-fips, crossplane-provider-azure, terraform,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, cadvisor, flux, helm-operator-fips, kargo, policy-controller, flux-helm-controller, kubevela, bom, helm-fips, policy-controller-fips, falcoctl, argo-workflows, up, timoni, buildkitd, cri-tools, docker-machine-driver-harvester, eksctl, gitsign,...