CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: terraform-fips, opentofu, rancher-agent, vault-fips, gitea, cert-manager-openshift-routes, harbor, zot, cert-manager-istio-csr-fips, dex-fips, nuclei, cert-manager-openshift-routes-fips, elastic-agent, external-secrets-operator, openbao-fips,...

CLEANSTART-2026-DS01292 Security fixes for CVE-2025-47910, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-24051, CVE-2026-27141, ghsa-9h8m-3fm2-qjrq applied in versions: 1.19.1-r0, 1.19.2-r0, 1.19.2-r1

Multiple security vulnerabilities affect the cert-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: consul-fips, prometheus, kube-arangodb-fips, omnictl-multiarch, opentofu, rancher-agent, terraform-fips, thanos-operator-fips, eksctl, redka, flux-notification-controller, kine, kubernetes-csi-node-driver-registrar-fips, mattermost, reports-server, consul, conftest,...

CLEANSTART-2026-YC48827 Within HostnameError

Multiple security vulnerabilities affect the cert-manager-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DP30290 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the cert-manager-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-exporter-fips, aws-privateca-issuer-fips, cert-manager, step-issuer, cert-manager-istio-csr, cert-manager-cmctl, cert-manager-webhook-pdns, aws-privateca-issuer, cert-manager-webhook-pdns-fips, cert-exporter, cert-manager-cmctl-fips, step-issuer-fips,...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, terraform, k3s, gitlab-rails-ce, backup-restore-operator, falco-no-driver, rke2-runtime-fips, consul-k8s, vault, cert-manager-fips...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, terraform, k3s, gitlab-rails-ce, backup-restore-operator, falco-no-driver, rke2-runtime-fips, consul-k8s, vault, cert-manager-fips...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, crossplane-provider-aws-cloudfront, kubeadm-bootstrap-controller, k9s, kine, crossplane-provider-aws, grafana-operator, aws-flb-kinesis, mc, terraform-provider-sendgrid-fips, terragrunt, cert-exporter-fips, k8ssandra-operator-fips,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: goreleaser, up, kubescape, cert-manager, datadog-agent, kargo, gitsign, istio-pilot-agent, ko-fips, kots, bom, falcoctl, falcoctl-fips, k3d, kubeflow-katib, newrelic-infrastructure-agent, rancher-machine, policy-controller, eksctl, flux, scorecard, cert-manager-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: goreleaser, up, kubescape, cert-manager, datadog-agent, kargo, gitsign, istio-pilot-agent, ko-fips, kots, bom, falcoctl, falcoctl-fips, k3d, kubeflow-katib, newrelic-infrastructure-agent, rancher-machine, policy-controller, eksctl, flux, scorecard, cert-manager-fips,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: up, kubescape, cert-manager, bom, falcoctl-fips, k3d, rancher-agent, scorecard, ctop, spire-server-fips, kpt, tekton-chains, paranoia, skaffold, chartmuseum, k3s, slsa-verifier, falco, aactl...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-postgres-exporter-fips, kubewatch, atlantis, cluster-autoscaler-fips, kots, falcoctl, wireguard-go, pulumi-language-yaml, bank-vaults, gomplate, flux-notification-controller, yq, crossplane-provider-aws, zot, kube-state-metrics-fips,...