PT-2026-7886

Name of the Vulnerable Software and Affected Versions Element Server Suite Community Edition ESS Community versions prior to 25.12.1 Description The Element Server Suite Community Edition ESS Community Helm Chart contains a flaw in its secrets initialization hook, specifically within the...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, syft-fips, podman, kubernetes-dashboard-fips, cert-manager-istio-csr-fips, crossplane-provider-aws-memorydb, authservice, crossplane-provider-aws-sqs, fulcio, cert-manager-csi-driver, helm-diff-fips, kube-logging-logging-operator,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, syft-fips, podman, kubernetes-dashboard-fips, cert-manager-istio-csr-fips, crossplane-provider-aws-memorydb, authservice, crossplane-provider-aws-sqs, fulcio, cert-manager-csi-driver, helm-diff-fips, kube-logging-logging-operator,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, syft-fips, podman, kubernetes-dashboard-fips, cert-manager-istio-csr-fips, crossplane-provider-aws-memorydb, authservice, crossplane-provider-aws-sqs, fulcio, cert-manager-csi-driver, helm-diff-fips, kube-logging-logging-operator,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.1 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CVE-2026-24851

CVE-2026-24851 technical details are not publicly available in the provided documents. Monitor for updates.

AZL-76878 CVE-2025-58190 affecting package helm for versions less than 3.14.2-10

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76872 CVE-2025-47911 affecting package helm for versions less than 3.14.2-10

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: prometheus, timoni, headlamp, traefik, kubernetes-dns-node-cache, eksctl, bento, tfsec, kine, gitness, mattermost, goreleaser, newrelic-fluent-bit-output, minio, runc, opensearch-k8s-operator, kubo, bom, nerdctl, opentofu, flux-kustomize-controller, external-dns,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: prometheus, timoni, headlamp, traefik, kubernetes-dns-node-cache, eksctl, bento, tfsec, kine, gitness, mattermost, goreleaser, newrelic-fluent-bit-output, minio, runc, opensearch-k8s-operator, kubo, bom, nerdctl, opentofu, flux-kustomize-controller, external-dns,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, mountpoint-s3-csi-driver, nri-couchbase, kubernetes-replicator, timescaledb-tune, knative-operator, ctop, ytt, chart-testing, spire-server, k3s, ghaudit, doppler-kubernetes-operator,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, mountpoint-s3-csi-driver, nri-couchbase, kubernetes-replicator, timescaledb-tune, knative-operator, ctop, ytt, falco-no-driver, chart-testing, spire-server, k3s, ghaudit,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, bank-vaults, git-credential-oauth, cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, sops, gostatsd, rancher-machine, stakater-reloader, bento, mountpoint-s3-csi-driver, kube-vip-cloud-provider,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, bank-vaults, git-credential-oauth, cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, sops, gostatsd, rabbitmq-default-user-credential-updater, rancher-machine, stakater-reloader, bento,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, mountpoint-s3-csi-driver, nri-couchbase, kubernetes-replicator, timescaledb-tune, knative-operator, ctop, ytt, falco-no-driver, chart-testing, spire-server, k3s, ghaudit,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, mountpoint-s3-csi-driver, nri-couchbase, kubernetes-replicator, timescaledb-tune, knative-operator, ctop, ytt, chart-testing, spire-server, k3s, ghaudit, doppler-kubernetes-operator,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, bank-vaults, git-credential-oauth, cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, sops, gostatsd, rancher-machine, stakater-reloader, bento, mountpoint-s3-csi-driver, kube-vip-cloud-provider,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, bank-vaults, git-credential-oauth, cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, sops, gostatsd, rabbitmq-default-user-credential-updater, rancher-machine, stakater-reloader, bento,...

CLEANSTART-2026-UR80185 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-FS64938 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...