CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: zarf-fips, xeol, rancher, ocm-cli-fips, k9s-fips, argocd-image-updater, trivy-fips, cloudbeat, kubescape-operator, gitlab-operator, manifest-tool, falcoctl, kubescape-operator-fips, rancher-helm, rancher-fleet-fips, rancher-fleet, tw, consul-k8s-fips, kots,...

CLEANSTART-2026-CZ42417 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.35.0-r0

Multiple security vulnerabilities affect the kubernetes-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RD43272 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.35.0-r0

Multiple security vulnerabilities affect the kubernetes-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RZ88142 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.35.0-r0, 1.35.4-r0

Multiple security vulnerabilities affect the kubernetes-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-NL96892 Within HostnameError

Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-YK54840 Within HostnameError

Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-RT10702 Within HostnameError

Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DN37053 Within HostnameError

Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-SO17846 Within HostnameError

Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2025-AZ51267 Security fixes for GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-US16386 Security fixes for GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.7.2-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, eks-distro, rancher, azure-container-networking, buildah, podman, kubernetes-fips, kubernetes, cluster-autoscaler-fips, sriov-network-device-plugin, rancher-agent, rke2-runtime, node-feature-discovery, cluster-autoscaler,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, eks-distro, rancher, azure-container-networking, buildah, podman, kubernetes-fips, kubernetes, cluster-autoscaler-fips, sriov-network-device-plugin, rancher-agent, rke2-runtime, node-feature-discovery, cluster-autoscaler,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, eks-distro, rancher, azure-container-networking, buildah, podman, kubernetes-fips, kubernetes, cluster-autoscaler-fips, sriov-network-device-plugin, rancher-agent, rke2-runtime, node-feature-discovery, cluster-autoscaler,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, eks-distro, rancher, azure-container-networking, buildah, podman, kubernetes-fips, kubernetes, cluster-autoscaler-fips, sriov-network-device-plugin, rancher-agent, rke2-runtime, node-feature-discovery, cluster-autoscaler,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: packer-fips, gcp-compute-persistent-disk-csi-driver-fips, kube-fluentd-operator, sbom-scorecard, redpanda, esbuild, spire-server, ipfs-cluster-fips, temporal-server-fips, containerd-fips, grype-db, grafana-pyroscope, tflint, trivy-fips, nvidia-nsight-compute-13.1,...