CLEANSTART-2026-MI26424 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the cert-manager package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: dask-gateway, terraform-docs, direnv, velero-plugin-for-microsoft-azure, configmap-reload, argo-rollouts, helm-operator, controller-gen, gobump, nri-prometheus, croc, kafka-proxy, kserve-modelmesh-serving, nri-nginx, kubernetes-csi-livenessprobe, fluent-operator,...

Azure Linux 3.0 Security Update: cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter (CVE-2023-3978)

The version of cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3978 advisory. - Text nodes not in the HTML namespace ar...