CLEANSTART-2026-OK45738 Within HostnameError

Security vulnerability affects the cert-manager package. Within HostnameError...

AZL-75425 CVE-2025-11065 affecting package cert-manager for versions less than 1.11.2-27

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75389 CVE-2025-11065 affecting package cert-manager 1.12.15-4

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Azure Linux 3.0 Security Update: cert-manager (CVE-2023-6337)

The version of cert-manager installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6337 advisory. - HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, aws-privateca-issuer, step-issuer, cert-manager-webhook-pdns, cert-exporter, cert-manager-cmctl...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, aws-privateca-issuer, step-issuer, cert-manager-webhook-pdns, cert-exporter, cert-manager-cmctl...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer-fips, aws-privateca-issuer, cert-manager-cmctl, step-issuer-fips, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer, cert-exporter, cert-manager-cmctl-fips, cert-exporter-fips, cert-manager-webhook-pdns-fips...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: terraform, cert-manager-fips, backup-restore-operator, vault, consul-k8s, gitlab-rails-ce-fips, gitlab-rails-ce, rke2-runtime-fips, falco-no-driver, etcd, etcd-fips, k3s...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: terraform, cert-manager-fips, backup-restore-operator, vault, consul-k8s, gitlab-rails-ce-fips, gitlab-rails-ce, rke2-runtime-fips, falco-no-driver, etcd, etcd-fips, k3s...

CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25

CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25. A patched version of the package is available...

AZL-71557 CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: chartmuseum, wire-go, helm-set-status, aws-s3-controller, cloud-provider-vsphere, cluster-api-helm-controller, chisel, kuberlr, vendir, kube-state-metrics, aws-sigv4-proxy, cert-exporter, stern, redka, fulcio, go-bindata, kafka-proxy, kpt, spiffe-helper,...