GO-2026-5566 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, rancher-fleet, zarf, cilium-cli, helm-diff, gitlab-operator, kots, zarf-fips, flux-source-controller-fips, flux-source-controller, kuma, flux, cert-manager-cmctl-fips, cert-manager-cmctl, helm-diff-fips, flux-fips, helm-push, gitlab-operator-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, cloudbeat, cluster-api-helm-controller-fips, drone, zarf-fips, helm-exporter, tigera-operator, helm-push, zarf, gitlab-operator, crossplane-fips, helm-mapkubeapis, kubescape-operator, cert-manager-cmctl, gatekeeper, maru, kots,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, flux-source-controller, flux, tw, cert-manager-cmctl, rancher-helm, kubescape, helm-operator, zot, k9s, chart-testing, k8ssandra-client, kots, flux-helm-controller...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kaniko, opa, conftest, step, spegel, k3d, ksops, gomplate, sops, step-ca, trivy, minio, cilium-cli, melange, zarf, hubble-ui, spire-server, k3s, smarter-device-manager, guac, kubernetes-csi-driver-hostpath, sigstore-scaffolding, dex, dbmate, grafana-agent-operator,...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kots, flux-source-controller, flux, helm-push, rancher-fleet, cilium-cli, zarf, kuma...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kots, flux-source-controller, flux, helm-push, rancher-fleet, cilium-cli, zarf, kuma...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, flux-source-controller, cerbos, tw, cert-manager-cmctl, kargo, rancher-helm, helm-operator, envoy-gateway, zot, istio, k9s, chart-testing, k8ssandra-client, kots,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: kafka-proxy, cloudprober, terraform-provider-sendgrid, prometheus-adapter, apache-exporter, kyverno-policy-reporter-ui, secrets-store-csi-driver-provider-gcp, step-ca, thanos, prometheus-pushgateway, apisix-ingress-controller, kube-metrics-adapter,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, cloud-provider-vsphere, gitleaks, flux-kustomize-controller, ctop, apache-exporter, kyverno-policy-reporter-ui, cilium-cli, langfuse, golangci-lint, spire-server, crossplane-provider-aws-sns, local-path-provisioner, vault-k8s, mountpoint-s3-csi-driver,...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: q, flux-kustomize-controller, cilium-cli, crossplane-provider-aws-sns, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, aactl, crossplane-provider-aws-lambda, argo-events, docker-cli-buildx, buildkitd, trivy-operator, opentofu, extism,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: q, flux-kustomize-controller, cilium-cli, crossplane-provider-aws-sns, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, aactl, crossplane-provider-aws-lambda, argo-events, docker-cli-buildx, buildkitd, trivy-operator, opentofu, extism,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, crossplane-provider-aws-s3, cloudbeat, crossplane-provider-aws-lambda, terraform-provider-azuread-fips, crossplane-provider-aws-cognitoidentity-fips, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-efs-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-google-cas-issuer-fips, step-issuer, cert-manager-google-cas-issuer, cert-manager-csi-driver-fips, aws-privateca-issuer-fips, opentelemetry-operator-fips, mariadb-operator-fips, cert-manager-webhook-pdns, cert-manager-webhook-pdns-fips, step-issuer-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer, cert-manager-istio-csr, opentelemetry-operator, cert-manager-csi-driver, mariadb-operator...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer, cert-manager-istio-csr, opentelemetry-operator, cert-manager-csi-driver, mariadb-operator...