GO-2026-5566 vulnerabilities

Vulnerabilities for packages: helm-diff-fips, gitlab-operator-fips, zarf-fips, zarf, cilium-cli, flux-fips, cert-manager-cmctl-fips, kuma, flux, cert-manager-cmctl, kots, rancher-fleet, flux-source-controller, gitlab-operator, helm-diff, flux-source-controller-fips, helm-push, rancher-fleet-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: trivy-fips, crossplane-fips, kyverno-notation-aws-fips, k8ssandra-client, conftest, ocm-kubernetes-controller, rancher-fleet-fips, kube-arangodb, argo-cd, trivy, manifest-tool, kots, xeol, gitness, tw, k9s-fips, cloudbeat, gatekeeper, ocm-kubernetes-controller-fips,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: grafana-agent-operator, gomplate, kubernetes-csi-external-provisioner, sigstore-scaffolding, tflint, ferretdb, opentelemetry-collector-contrib, k3s, opa, grafana-mimir, kube-rbac-proxy, terraform-docs, k3d, sops, step, terraform-provider-google, spire-server, spicedb...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: flux, k9s, chart-testing, eksctl, cluster-api-helm-controller, pluto, chartmuseum, k8ssandra-client, helm-push, cilium-cli, zarf, flux-helm-controller, helm-docs, flux-source-controller, rancher-helm, cert-manager-cmctl, helm-operator, zot, trivy, kots, kubescape, tw...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, flux, helm-push, cert-manager-cmctl, kuma, cilium-cli, zarf, rancher-fleet...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, flux, helm-push, cert-manager-cmctl, kuma, cilium-cli, zarf, rancher-fleet...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k9s, chart-testing, eksctl, cluster-api-helm-controller, pluto, chartmuseum, k8ssandra-client, helm-push, k8sgpt, cerbos, cilium-cli, zarf, flux-helm-controller, helm-docs, flux-source-controller, rancher-helm, cert-manager-cmctl, helm-operator, istio, kargo,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, memcached-exporter, crossplane-provider-aws-iam, crossplane-provider-aws-lambda, libnvidia-container, kubernetes-csi-livenessprobe, pulumi, cloudprober, trino, kubeflow-katib, terraform-provider-grafana, kubernetes-event-exporter...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: aactl, crossplane-provider-aws-iam, opensearch-k8s-operator, crossplane-provider-aws-lambda, kubernetes-csi-livenessprobe, yace, grafana-operator, harbor-registry, kubeflow-katib, kubernetes-event-exporter, kubernetes-dns-node-cache, k3s, mongodb-kubernetes-operator,...

CLEANSTART-2026-JL48383 Security fixes in cert-manager-cmctl-fips 2.5.0-r1

Package cert-manager-cmctl-fips version 2.5.0-r1 fixes 7 vulnerabilities: ghsa-jxpm-75mh-9fp7, ghsa-8xwf-rjm4-xvhv, ghsa-xf85-363p-868w, ghsa-vh4v-2xq2-g5cg, CVE-2026-50151...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, aactl, kubernetes-event-exporter, rancher-loglevel, smokescreen, prometheus, sbom-convert, sbomqs, cilium, nri-kafka, terraform-provider-kubernetes, kafka-proxy, sriov-network-device-plugin, portieris, cert-manager-csi-driver,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, aactl, kubernetes-event-exporter, rancher-loglevel, smokescreen, prometheus, sbomqs, cilium, nri-kafka, terraform-provider-kubernetes, kafka-proxy, sriov-network-device-plugin, portieris, cert-manager-csi-driver, step-ca,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: aactl, crossplane-provider-aws-iam, crossplane-provider-aws-lambda, pulumi, crossplane-provider-aws-ec2, crossplane-provider-aws-sns, gitaly, opentofu, crossplane-provider-aws-dynamodb, helm-push, crossplane-provider-azure-sql, vcluster, zarf, openbao,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: aactl, crossplane-provider-aws-iam, crossplane-provider-aws-lambda, pulumi, crossplane-provider-aws-ec2, crossplane-provider-aws-sns, gitaly, opentofu, crossplane-provider-aws-dynamodb, helm-push, crossplane-provider-azure-sql, vcluster, zarf, openbao,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cluster-api, trivy-fips, argo-events-fips, crossplane-provider-aws-kinesis-fips, crossplane-fips, kyverno-notation-aws-fips, guac, trufflehog, crossplane-provider-aws-cloudfront-fips, crossplane-provider-aws-ecr, helm-diff, atlantis, lazygit, nuclei,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: mariadb-operator, cert-manager-openshift-routes-fips, gitlab-operator-fips, aws-privateca-issuer, cert-manager-cmctl, percona-server-mongodb-operator-fips, step-issuer, mariadb-operator-fips, opentelemetry-operator-fips, cert-manager-istio-csr, cert-manager-csi-drive...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, step-issuer, mariadb-operator, cert-manager-istio-csr, cert-manager-webhook-pdns, cert-manager-cmctl, aws-privateca-issuer, opentelemetry-operator, cert-manager-csi-driver...