CLEANSTART-2026-MI26424 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the cert-manager package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth, gptscript, supercronic, kuberay-operator, timoni, go-md2man, git-lfs, metrics-server, x509-certificate-exporter, karma, speedtest-go, fscrypt, nginx-prometheus-exporter, openbao-k8s, grpc-health-probe, sftpgo-plugin-eventsearch,...

Azure Linux 3.0 Security Update: cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter (CVE-2023-3978)

The version of cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3978 advisory. - Text nodes not in the HTML namespace ar...