CLEANSTART-2026-MI26424 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the cert-manager package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, http-echo, kube-fluentd-operator, whereabouts, scorecard, kube-metrics-adapter, kubevela, capslock, wgcf, kube-rbac-proxy, gobump, extism, flux-source-controller, k8sgpt, kustomize, s5cmd, prometheus-alertmanager,...

Azure Linux 3.0 Security Update: cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter (CVE-2023-3978)

The version of cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3978 advisory. - Text nodes not in the HTML namespace ar...