10 matches found
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: jaeger-fips, istio, karma-fips, mc, keda-fips, mc-fips, opentelemetry-collector, cloud-sql-proxy, trillian-fips, ops-agent, amazon-cloudwatch-agent-operator, telegraf, keda, commercial-grafana, datadog-agent, loki, jaeger, cloudzero-agent-fips, node-problem-detector,...
CLEANSTART-2026-WI70970 Security fixes in prometheus-fips 3.9.0-r0
Package prometheus-fips version 3.9.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, go-discover, crossplane, harbor, gatekeeper, terraform, vitess, crossplane-provider-azure-alertsmanagement, cluster-api-azure-controller, falcoctl, frankenphp-8.5, buildah, commercial-grafana, chisel-fips,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, harbor, gatekeeper, terraform, vitess, frankenphp-8.5, commercial-grafana, chisel-fips, flux-image-automation-controller, flux-image-automation-controller-fips, loki, rancher, commercial-expanso-edge, gitea, etcd-fips,...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, harbor, gatekeeper, terraform, vitess, frankenphp-8.5, commercial-grafana, chisel-fips, flux-image-automation-controller, flux-image-automation-controller-fips, gatus-fips, loki, rancher, commercial-expanso-edge, syft-fips, gitea,...
CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-LS08172 Within HostnameError
Multiple security vulnerabilities affect the prometheus-fips package. Within HostnameError. See references for individual vulnerability details...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: docker-credential-gcr, docker-machine-driver-harvester, buildkitd, kubevela, gitsign, crane, kpt, helm-operator, falcoctl, argo-workflows, flux-helm-controller, newrelic-infrastructure-agent, eksctl, policy-controller, loki, kubescape, cadvisor-fips, skaffold,...