GO-2026-5882 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, helm-exporter, gitlab-operator-fips, gatekeeper, kyverno, rancher, rancher-helm, k8ssandra-client-fips, chaos-mesh, crossplane, opentofu, kubescape, k9s, cloudbeat, crossplane-fips, falcoctl, chartmuseum-fips, helm-mapkubeapis, opentofu-fips,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, nri-prometheus, nuclei, kubernetes-csi-driver-hostpath, prometheus-alertmanager, argo-workflows-fips, prometheus-statsd-exporter, apisix-ingress-controller, k8sgpt-operator, prometheus-bind-exporter, flux-image-reflector-controller,...

CLEANSTART-2026-JV33217 Security fixes in helm-operator-fips 1.41.1-r2

Package helm-operator-fips version 1.41.1-r2 fixes 52 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2025-68121, CVE-2026-25679, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-VY72501 Security fixes in helm-operator-fips 1.41.1-r0

Package helm-operator-fips version 1.41.1-r0 fixes 3 vulnerabilities: ghsa-9h84-gmv7-982p, ghsa-mf38-5pwr-xv68, ghsa-x4rx-4gw5-53pq...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-exporter, gatekeeper, docker-cli-buildx-fips, rancher, rancher-helm, syft-fips, chaos-mesh, crossplane, kubevela-fips, kubescape, k9s, cloudbeat, fuse-overlayfs-snapshotter, crossplane-fips, kubevela, chartmuseum-fips, helm-mapkubeapis, harvester-fips,...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cfssl-fips, nvidia-nsight-compute-13.0, aws-load-balancer-controller, azure-service-operator-fips, gcp-compute-persistent-disk-csi-driver-fips, nuclei, kubernetes-csi-driver-hostpath, victoriametrics-operator, cloud-provider-azure-fips, argo-workflows-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, nri-prometheus, nuclei, kubernetes-csi-driver-hostpath, prometheus-alertmanager, argo-workflows-fips, prometheus-statsd-exporter, apisix-ingress-controller, k8sgpt-operator, prometheus-bind-exporter, flux-image-reflector-controller,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: tekton-chains, timoni, k8sgpt, goreleaser, skopeo, docker-machine-driver-harvester, policy-controller, trivy, ctop, newrelic-infrastructure-agent, cadvisor, flux, pulumi, rancher-machine, skaffold, kargo, eksctl, aactl, k3d, nerdctl, crane, argo-workflows-fips,...