GO-2026-5566 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, gitlab-operator, helm-push, cert-manager-cmctl, kuma, flux-source-controller-fips, rancher-fleet-fips, flux-source-controller, kots, flux, cert-manager-cmctl-fips, helm-diff, helm-diff-fips, rancher-fleet, cilium-cli, zarf, zarf-fips, flux-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: k9s-fips, drone, gitlab-operator, envoy-gateway-fips, consul-k8s-fips, crossplane-fips, gogatekeeper, jfrog-cli, manifest-tool, ratify, chaos-mesh, xeol, zarf, helm-exporter-fips, gitlab-operator-fips, ocm-cli, helm-push, kyverno-notation-aws-fips, k9s, ratify-fips,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: spire-server, falcosidekick, k3d, rqlite, k8sgpt-operator, grafana-agent-operator, certificate-transparency, kubernetes-csi-driver-hostpath, restic, cloudnative-pg, sops, opentelemetry-collector, hubble-ui, kots, step-ca, dbmate, opentelemetry-collector-contrib,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-operator, helm-push, tw, flux-source-controller, kots, k9s, eksctl, helm-docs, zot, pluto, trivy, chart-testing, flux-helm-controller, k8ssandra-client, zarf, flux, kubescape, cert-manager-cmctl, chartmuseum, rancher-helm, cluster-api-helm-controller, cilium-cli...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: kuma, zarf, flux, kots, cert-manager-cmctl, helm-push, rancher-fleet, cilium-cli, flux-source-controller...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: kuma, zarf, flux, kots, cert-manager-cmctl, helm-push, rancher-fleet, cilium-cli, flux-source-controller...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-operator, istio, helm-push, linkerd2, tw, flux-source-controller, kots, k9s, rancher-fleet, eksctl, helm-docs, cerbos, zot, envoy-gateway, pluto, trivy, chart-testing, flux-helm-controller, k8ssandra-client, zarf, cert-manager-cmctl, k8sgpt, chartmuseum, kargo,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, mesosphere-vsphere-csi, snyk-cli, cloudprober, kpt, kubernetes-csi-driver-hostpath, helm, kubo, restic, buildah, crossplane-provider-aws-kms, kube-state-metrics, dkron, gatekeeper, otel-cli, go, step-ca, kubernetes-dns-node-cache,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k3d, newrelic-infra-operator, crossplane-provider-aws-dynamodb, gostatsd, kor, pgtimetable, timescaledb-parallel-copy, vertical-pod-autoscaler, wave, extism, mesosphere-vsphere-csi, kubo, rancher-telemetry, restic, amass, rabbitmq-default-user-credential-updater,...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, gostatsd, etcd, kpt, rabbitmq-default-user-credential-updater, cert-manager-csi-driver, govulncheck, kube-state-metrics, rancher-loglevel, apko, spicedb-operator, tailscale, openbao, fluxcd-kustomize-mutating-webhook, tetragon,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, gostatsd, etcd, kpt, rabbitmq-default-user-credential-updater, cert-manager-csi-driver, govulncheck, kube-state-metrics, rancher-loglevel, apko, spicedb-operator, tailscale, openbao, fluxcd-kustomize-mutating-webhook, tetragon,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, external-secrets-operator, crossplane, extism, snyk-cli, wolfictl, helm, crossplane-provider-aws-kms, hydra, crossplane-provider-keycloak, apko, docker-cli-buildx, buildkitd, gptscript, openbao, gomplate, zot, dagger,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, external-secrets-operator, crossplane, extism, snyk-cli, wolfictl, helm, crossplane-provider-aws-kms, hydra, crossplane-provider-keycloak, apko, docker-cli-buildx, buildkitd, gptscript, openbao, gomplate, zot, dagger,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3-fips, terraform, k9s-fips, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudformation-fips, argo-workflows-fips, flux-source-controller, nuclei, atlantis-fips, terraform-provider-databricks-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, mariadb-operator-fips, percona-server-mongodb-operator-fips, mariadb-operator, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr-fips, cert-manager-google-cas-issuer-fips, step-issuer, percona-server-mongodb-operator,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, step-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, aws-privateca-issuer, opentelemetry-operator, cert-manager-csi-driver, percona-server-mongodb-operator, mariadb-operator...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, step-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, aws-privateca-issuer, opentelemetry-operator, cert-manager-csi-driver, percona-server-mongodb-operator, mariadb-operator...