CLEANSTART-2026-TF85238 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cert-manager package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.2

cert-manager Operator for Red Hat OpenShift 1.19.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.2

cert-manager Operator for Red Hat OpenShift 1.19.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.2

cert-manager Operator for Red Hat OpenShift 1.19.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

AZL-99156 CVE-2026-78662 affecting package cert-manager for versions less than 1.12.15-14

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99159 CVE-2026-56855 affecting package cert-manager for versions less than 1.12.15-14

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-98343 CVE-2026-37236 affecting package cert-manager for versions less than 1.12.15-14

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

GO-2026-6107 vulnerabilities

Vulnerabilities for packages: multicluster-controlplane, cilium-cli, loki, cert-manager, rancher-support-bundle-kit, cilium, dapr, kube-conformance, commercial-grafana, external-dns, kots, milvus, minio, commercial-nginx-ingress, kyverno, hubble, kubernetes, kine, multicluster-controlplane-fips,...

GHSA-6VCH-Q96H-7GC3 vulnerabilities

Vulnerabilities for packages: kine, loki, cilium-cli, minio, cert-manager, kyverno, kots, dapr, cilium, hubble, kubernetes, external-dns...

GO-2026-6107 vulnerabilities

Vulnerabilities for packages: kine, loki, cilium-cli, minio, cert-manager, kyverno, kots, dapr, cilium, hubble, kubernetes, external-dns...

CVE-2026-73500 vulnerabilities

Vulnerabilities for packages: kine, loki, cilium-cli, minio, cert-manager, kyverno, kots, dapr, cilium, hubble, kubernetes, external-dns...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, kube-state-metrics, kwok, rke2-cloud-provider, cluster-api-provider-vsphere, kuma, kyverno, cluster-autoscaler, cloud-provider-azure, azure-service-operator, kubescape, kyverno-notation-aws, pulumi-kubernetes-operator,...

CVE-2026-73500 affecting package cert-manager for versions less than 1.12.15-12

CVE-2026-73500 affecting package cert-manager for versions less than 1.12.15-12. A patched version of the package is available...

GO-2026-5363 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr-fips, cert-manager-istio-csr, istio...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: kuma, flux-fips, flux, helm-diff, helm-push, rancher-fleet-fips, zarf, flux-source-controller-fips, zarf-fips, gitlab-operator, cert-manager-cmctl, helm-diff-fips, kots, rancher-fleet, cert-manager-cmctl-fips, flux-source-controller, cilium-cli, gitlab-operator-fips...

GO-2026-5289 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr-fips, cert-manager-istio-csr...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: kuma, flux-fips, flux, helm-diff, helm-push, rancher-fleet-fips, zarf, flux-source-controller-fips, zarf-fips, gitlab-operator, cert-manager-cmctl, helm-diff-fips, kots, rancher-fleet, cert-manager-cmctl-fips, flux-source-controller, cilium-cli, gitlab-operator-fips...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: mariadb-operator, cert-manager-webhook-pdns-fips, cert-manager-google-cas-issuer, cert-manager-openshift-routes-fips, cert-manager-csi-driver-fips, aws-privateca-issuer-fips, aws-privateca-issuer, cert-manager-openshift-routes, step-issuer, opentelemetry-operator-fip...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer-fips, aws-privateca-issuer, cert-manager-webhook-pdns, step-issuer, cert-manager-webhook-pdns-fips, cert-exporter-fips, cert-manager-cmctl, cert-exporter, cert-manager-cmctl-fips, step-issuer-fips, cert-manager-istio-csr...

GO-2025-4116 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, terraform, backup-restore-operator, k3s, kube-conformance, etcd-fips, falco-no-driver, etcd, vault, cert-manager-fips, consul-k8s, rke2-runtime-fips...