GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, coredns, crossplane, kuberay-operator, redpanda, kubevela, docker-machine-driver-harvester, cert-manager, flux, nfs-subdir-external-provisioner, flyte, vault-k8s, argo-events, descheduler, cluster-api-ipam-provider-in-cluster,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, coredns, crossplane, kuberay-operator, redpanda, kubevela, docker-machine-driver-harvester, cert-manager, flux, nfs-subdir-external-provisioner, flyte, vault-k8s, argo-events, descheduler, cluster-api-ipam-provider-in-cluster,...

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, coredns, crossplane, buildah, kuberay-operator, redpanda, kubevela, tetragon, azcopy, cert-manager, docker-machine-driver-harvester, src, flux, nri-kafka, nfs-subdir-external-provisioner, harbor, kserve, flyte, vault-k8s, conjur-cli,...

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, coredns, crossplane, buildah, kuberay-operator, redpanda, kubevela, tetragon, azcopy, cert-manager, docker-machine-driver-harvester, src, flux, nfs-subdir-external-provisioner, harbor, kserve, flyte, vault-k8s, conjur-cli, argo-events...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, coredns, crossplane, buildah, kuberay-operator, redpanda, kubevela, tetragon, azcopy, cert-manager, docker-machine-driver-harvester, src, flux, nfs-subdir-external-provisioner, harbor, kserve, flyte, vault-k8s, conjur-cli, argo-events...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, coredns, crossplane, buildah, kuberay-operator, redpanda, kubevela, tetragon, azcopy, cert-manager, docker-machine-driver-harvester, src, flux, nri-kafka, nfs-subdir-external-provisioner, harbor, kserve, flyte, vault-k8s, conjur-cli,...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, traefik, elastic-agent, multus-cni, spark-operator-fips, loki, sonobuoy-fips, kots, rancher-fleet, newrelic-nri-kube-events, knative-kafka-broker-fips, cert-exporter, seaweedfs-operator, vertical-pod-autoscaler,...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: nri-mssql, cloud-provider-gcp-cloud-controller-manager-fips, traefik, elastic-agent, kube-logging-operator, glab, multus-cni, spark-operator-fips, ld-relay-fips, aws-sigv4-proxy-fips, ctop, loki, sonobuoy-fips, kots, rancher-fleet, deck,...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: nri-mssql, cloud-provider-gcp-cloud-controller-manager-fips, traefik, elastic-agent, kube-logging-operator, glab, multus-cni, spark-operator-fips, ld-relay-fips, aws-sigv4-proxy-fips, ctop, loki, sonobuoy-fips, kots, rancher-fleet, deck,...

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: nri-mssql, cloud-provider-gcp-cloud-controller-manager-fips, traefik, elastic-agent, kube-logging-operator, glab, multus-cni, spark-operator-fips, ld-relay-fips, aws-sigv4-proxy-fips, ctop, loki, sonobuoy-fips, kots, rancher-fleet, deck,...

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: nri-mssql, cloud-provider-gcp-cloud-controller-manager-fips, traefik, elastic-agent, kube-logging-operator, glab, multus-cni, spark-operator-fips, ld-relay-fips, aws-sigv4-proxy-fips, ctop, loki, sonobuoy-fips, kots, rancher-fleet, deck,...

CLEANSTART-2026-EI06494 Security fixes for CVE-2025-4673, CVE-2025-47907, CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-6vp2-p543-phr9, ghsa-9h8m-3fm2-qjrq, ghsa-cxp5-9wg8-vx66, ghsa-hcp3-c754-cr77, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-vugc-356p-c3xw applied in versions: 3.2.3-r0, 3.2.3-r1, 3.2.3-r2

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BY59711 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: dagger, elastic-agent, traefik, flux-notification-controller-fips, thanos, velero-fips, loki, ferretdb, knative-kafka-broker-fips, crossplane-provider-gcp, kubevela-fips, tekton-pipelines-fips, azuredisk-csi, gitlab-operator-fips, gitaly-fips, rancher-webhook,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, mariadb-operator-fips, opentelemetry-operator-fips, aws-privateca-issuer, cert-manager-openshift-routes-fips, percona-server-mongodb-operator-fips, cert-manager-google-cas-issuer, cert-manager-csi-driver, step-issuer, step-issuer-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, opentelemetry-operator, cert-manager-webhook-pdns, cert-manager-istio-csr, mariadb-operator, step-issuer, percona-server-mongodb-operator, aws-privateca-issuer, cert-manager-csi-driver...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, opentelemetry-operator, cert-manager-webhook-pdns, cert-manager-istio-csr, mariadb-operator, step-issuer, percona-server-mongodb-operator, aws-privateca-issuer, cert-manager-csi-driver...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, mariadb-operator-fips, opentelemetry-operator-fips, aws-privateca-issuer, cert-manager-openshift-routes-fips, percona-server-mongodb-operator-fips, cert-manager-google-cas-issuer, cert-manager-csi-driver, step-issuer, step-issuer-fips,...

CLEANSTART-2026-HV28992 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3. See references for individual vulnerability details...

CLEANSTART-2026-QW16951 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...