GO-2025-4116 vulnerabilities

Vulnerabilities for packages: cert-manager-fips, backup-restore-operator, gitlab-rails-ce, consul-k8s, kube-conformance, gitlab-rails-ce-fips, vault, rke2-runtime-fips, terraform, k3s, etcd-fips, etcd, falco-no-driver...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni-fips, victorialogs, go, pgwatch, victorialogs-fips, flux-image-reflector-controller, flux-notification-controller, grafana-operator, temporal-fips, nova-fips, aws-ebs-csi-driver, nova, victoriametrics-fips, loki-fips, grafana-fips, flux-source-watcher,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, opentofu-fips, zot, rke2-runtime-fips, gitlab-pages, azure-aad-pod-identity-mic, fuse-overlayfs-snapshotter, snyk-cli, azurefile-csi-fips, kaf, aws-flb-kinesis-fips, gitlab-kas-fips, keda, gatekeeper, consul, k3s, flux-source-watcher,...

CLEANSTART-2026-HT22809 Security fixes in cert-manager-fips 1.19.2-r0

Package cert-manager-fips version 1.19.2-r0 fixes 1 vulnerabilities: CVE-2026-27141...

CLEANSTART-2026-AG74269 Security fixes in cert-manager-fips 1.17.4-r1

Package cert-manager-fips version 1.17.4-r1 fixes 24 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, CVE-2026-24051, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-QV66806 Security fixes in cert-manager-fips 1.19.1-r0

Package cert-manager-fips version 1.19.1-r0 fixes 16 vulnerabilities: CVE-2025-61729, CVE-2025-61725, CVE-2025-61723, CVE-2025-58188, CVE-2025-58187...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: minio-fips, opentofu-fips, cert-manager-istio-csr-fips, rancher-webhook-fips, seaweedfs-rocksdb-fips, zot, gitea-fips, xeol-fips, cert-manager-openshift-routes, percona-server-mongodb-operator, bento-fips, nuclei, commercial-grafana, dex-fips, seaweedfs-fips, xeol,...

CLEANSTART-2026-DS01292 Security fixes for CVE-2025-47910, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-24051, CVE-2026-27141, ghsa-9h8m-3fm2-qjrq applied in versions: 1.19.1-r0, 1.19.2-r0, 1.19.2-r1

Multiple security vulnerabilities affect the cert-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, opentofu-fips, listmonk, flux-kustomize-controller-fips, azure-aad-pod-identity-mic, fuse-overlayfs-snapshotter, kubernetes-dashboard-api-fips, helm-operator, headlamp, aws-flb-kinesis-fips, keda, gatekeeper, consul, rancher-helm, k3s,...

CLEANSTART-2026-YC48827 Within HostnameError

Multiple security vulnerabilities affect the cert-manager-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DP30290 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the cert-manager-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns-fips, aws-privateca-issuer-fips, aws-privateca-issuer, cert-exporter-fips, cert-exporter, cert-manager-cmctl-fips, step-issuer-fips, cert-manager-cmctl, step-issuer, cert-manager-istio-csr, cert-manager-webhook-pdns...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: cert-manager-fips, backup-restore-operator, gitlab-rails-ce, consul-k8s, kube-conformance, gitlab-rails-ce-fips, vault, rke2-runtime-fips, terraform, k3s, etcd-fips, etcd, falco-no-driver...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: cert-manager-fips, backup-restore-operator, gitlab-rails-ce, consul-k8s, kube-conformance, gitlab-rails-ce-fips, vault, rke2-runtime-fips, terraform, k3s, etcd-fips, etcd, falco-no-driver...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, logstash-exporter-fips, cass-operator, terraform-provider-azurerm, rabbitmq-messaging-topology-operator, docker-compose, prometheus-redis-exporter-fips, cosign-fips, vault-k8s-fips, kustomize, prometheus-beat-exporter,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: rancher-machine, slsa-verifier, policy-controller, kubeflow-katib, helm, newrelic-infrastructure-agent, up, argo-workflows, docker-credential-gcr, flux-image-reflector-controller, zot, helm-fips, docker-machine-driver-harvester, bom, helm-operator, ctop, falcoctl-fip...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: rancher-machine, slsa-verifier, policy-controller, kubeflow-katib, helm, newrelic-infrastructure-agent, up, argo-workflows, docker-credential-gcr, flux-image-reflector-controller, zot, helm-fips, docker-machine-driver-harvester, bom, helm-operator, ctop, falcoctl-fip...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: aactl, ctop, falcoctl-fips, skaffold, kubescape, slsa-verifier, up, chartmuseum, k3d, paranoia, scorecard, tekton-chains, k3s, kpt, bom, spire-server-fips...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, oauth2-proxy, aws-load-balancer-controller, newrelic-infrastructure-agent, zot, nfs-subdir-external-provisioner-fips, azure-aad-pod-identity-mic, fuse-overlayfs-snapshotter, falcoctl-fips, skaffold, kaf, terraform-provider-sendgrid-fips,...