CLEANSTART-2026-MI26424 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the cert-manager package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, trino, descheduler, sftpgo-plugin-kms, kubernetes-release, argo-events, aws-privateca-issuer, render-template, bank-vaults, kuberay-operator, aws-flb-cloudwatch, govulncheck, promxy, capslock, gops, harbor-cli, splunk-otel-collector, glow,...

Azure Linux 3.0 Security Update: cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter (CVE-2023-3978)

The version of cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3978 advisory. - Text nodes not in the HTML namespace ar...