CLEANSTART-2026-HT22809 Security fixes in cert-manager-fips 1.19.2-r0

Package cert-manager-fips version 1.19.2-r0 fixes 1 vulnerabilities: CVE-2026-27141...

CLEANSTART-2026-AG74269 Security fixes in cert-manager-fips 1.17.4-r1

Package cert-manager-fips version 1.17.4-r1 fixes 24 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, CVE-2026-24051, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-QV66806 Security fixes in cert-manager-fips 1.19.1-r0

Package cert-manager-fips version 1.19.1-r0 fixes 16 vulnerabilities: CVE-2025-61729, CVE-2025-61725, CVE-2025-61723, CVE-2025-58188, CVE-2025-58187...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: ratify, neuvector, spqr, flux-fips, zitadel, kyverno-notation-aws-fips, rancher-webhook-fips, frp, opentofu, k6, teleport, openbao-fips, zot, bento, rclone-fips, elastic-agent, packer-fips, yunikorn-k8shim-fips, k6-fips, rclone, cert-manager-cmctl-fips,...

CLEANSTART-2026-DS01292 Security fixes for CVE-2025-47910, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-24051, CVE-2026-27141, ghsa-9h8m-3fm2-qjrq applied in versions: 1.19.1-r0, 1.19.2-r0, 1.19.2-r1

Multiple security vulnerabilities affect the cert-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: runc, cilium-envoy, conftest, etcd-fips, prometheus-mongodb-exporter, falco-no-driver, kube-arangodb, flux-fips, zitadel, helm-set-status, kubevela-fips, flux-kustomize-controller, mc, omnictl-multiarch, opentofu, flux-image-automation-controller, headlamp-fips,...

CLEANSTART-2026-YC48827 Within HostnameError

Multiple security vulnerabilities affect the cert-manager-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DP30290 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the cert-manager-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, cert-manager-cmctl-fips, cert-manager-cmctl, cert-exporter-fips, cert-manager-webhook-pdns-fips, step-issuer-fips, cert-exporter, aws-privateca-issuer-fips, step-issuer...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: vault, cert-manager-fips, consul-k8s, terraform, gitlab-rails-ce-fips, etcd, gitlab-rails-ce, k3s, etcd-fips, backup-restore-operator, rke2-runtime-fips, falco-no-driver...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: vault, cert-manager-fips, consul-k8s, terraform, gitlab-rails-ce-fips, etcd, gitlab-rails-ce, k3s, etcd-fips, backup-restore-operator, rke2-runtime-fips, falco-no-driver...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: thanos, newrelic-infra-operator, melange, kubewatch, metrics-server, prometheus-statsd-exporter, k3d, grafana-agent-operator, cluster-proportional-autoscaler, prometheus-adapter-fips, fulcio, zot, step, spire-server, memcached-exporter, up,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: trivy, guac, kots, skaffold, pulumi, buildkitd, cosign, k3s, aactl, cadvisor, cri-tools, helm-operator-fips, skopeo, slsa-verifier, k9s, falcoctl, helm, kargo, zarf, dagger, ko-fips, kpt, rancher-machine, k3d, cosign-fips, docker-credential-gcr, goreleaser,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: trivy, guac, kots, skaffold, pulumi, buildkitd, cosign, k3s, aactl, cadvisor, cri-tools, helm-operator-fips, skopeo, slsa-verifier, k9s, falcoctl, helm, kargo, zarf, dagger, ko-fips, kpt, rancher-machine, k3d, cosign-fips, docker-credential-gcr, goreleaser,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: spire-server-fips, skaffold, kpt, tekton-chains, k3d, up, k3s, aactl, paranoia, chartmuseum, slsa-verifier, bom, scorecard, ctop, rancher-agent, kubescape, falcoctl-fips...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubeflow, skaffold, kubeflow-fips, runc, gobuster, prometheus-mongodb-exporter, slsa-verifier, falcoctl, stakater-reloader, kubewatch, metrics-server, cue, yq, prometheus-operator, prometheus-statsd-exporter, k3d, flux-kustomize-controller, frp, mc,...