1942 matches found
CVE-2026-24851
CVE-2026-24851 technical details are not publicly available in the provided documents. Monitor for updates.
AZL-76878 CVE-2025-58190 affecting package helm for versions less than 3.14.2-10
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76872 CVE-2025-47911 affecting package helm for versions less than 3.14.2-10
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
GHSA-G9Q4-QJX4-2V7Q vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch, steampipe, k8sgateway, newrelic-fluent-bit-output, falco-no-driver, ingress-nginx-controller, kine, fuse-overlayfs-snapshotter, external-dns, kubernetes-dashboard, redis-operator, scorecard, eksctl, kubernetes-dns-node-cache, cert-manager-cmctl,...
CVE-2025-61728 vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch, steampipe, k8sgateway, newrelic-fluent-bit-output, falco-no-driver, ingress-nginx-controller, kine, fuse-overlayfs-snapshotter, external-dns, kubernetes-dashboard, redis-operator, scorecard, eksctl, kubernetes-dns-node-cache, cert-manager-cmctl,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: custom-pod-autoscaler, newrelic-infra-operator, verticadb-operator, ghaudit, secrets-store-csi-driver-provider-aws, kubeflow, rabbitmq-messaging-topology-operator, juicefs, slsa-verifier, undock, crossplane-provider-aws-firehose, kine, minio-operator,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: custom-pod-autoscaler, newrelic-infra-operator, verticadb-operator, ghaudit, secrets-store-csi-driver-provider-aws, kubeflow, rabbitmq-messaging-topology-operator, juicefs, slsa-verifier, undock, crossplane-provider-aws-firehose, kine, minio-operator,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: kratos, ghaudit, undock, minio-operator, fuse-overlayfs-snapshotter, sbom-convert, nri-redis, git-sync, kor, xcaddy, dkron, step-kms-plugin, rancher-system-upgrade-controller, kubelet-csr-approver, steampipe, cluster-api-gcp-controller, paranoia, mods,...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: kratos, ghaudit, undock, minio-operator, fuse-overlayfs-snapshotter, sbom-convert, nri-redis, git-sync, kor, xcaddy, dkron, step-kms-plugin, rancher-system-upgrade-controller, kubelet-csr-approver, steampipe, cluster-api-gcp-controller, paranoia, mods,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: kratos, ghaudit, undock, minio-operator, fuse-overlayfs-snapshotter, sbom-convert, nri-redis, git-sync, kor, xcaddy, dkron, step-kms-plugin, rancher-system-upgrade-controller, kubelet-csr-approver, steampipe, cluster-api-gcp-controller, paranoia, mods,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: custom-pod-autoscaler, newrelic-infra-operator, verticadb-operator, ghaudit, secrets-store-csi-driver-provider-aws, kubeflow, rabbitmq-messaging-topology-operator, juicefs, slsa-verifier, undock, crossplane-provider-aws-firehose, kine, minio-operator,...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: custom-pod-autoscaler, newrelic-infra-operator, verticadb-operator, ghaudit, secrets-store-csi-driver-provider-aws, kubeflow, rabbitmq-messaging-topology-operator, juicefs, slsa-verifier, undock, crossplane-provider-aws-firehose, kine, minio-operator,...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: kratos, ghaudit, undock, minio-operator, fuse-overlayfs-snapshotter, sbom-convert, nri-redis, git-sync, kor, xcaddy, dkron, step-kms-plugin, rancher-system-upgrade-controller, kubelet-csr-approver, steampipe, cluster-api-gcp-controller, paranoia, mods,...
CLEANSTART-2026-UR80185 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-FS64938 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-HX78047 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-TL71584 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-JR37040 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-EL98016 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-GS02052 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...