GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, flux, cilium-cli, flux-source-controller-fips, rancher-fleet, cert-manager-cmctl-fips, helm-diff, gitlab-operator, helm-push, kots, helm-diff-fips, flux-source-controller, zarf, gitlab-operator-fips, rancher-fleet-fips, zarf-fips, kuma, flux-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: tigera-operator, xeol-fips, vcluster-fips, gatekeeper, ratify-fips, helm-exporter, tigera-operator-fips, maru, steampipe, cloudbeat, ocm-kubernetes-controller-fips, kubescape-server, cluster-api-helm-controller-fips, k9s, consul-k8s, helm-mapkubeapis, oras, kube-mgmt...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-operator, k8ssandra-client, helm-push, zarf, zot, cert-manager-cmctl, rancher-helm, k9s, kots, trivy, cilium-cli, helm-docs, eksctl, tw, flux-helm-controller, flux, kubescape, chartmuseum, pluto, cluster-api-helm-controller, chart-testing, flux-source-controller...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, spicedb, terragrunt, opentelemetry-collector, restic, ferretdb, hubble-ui, conftest, sigstore-scaffolding, zarf, kwok, opa, temporal, zot, ksops, vcluster, k8sgpt, pulumi-language-dotnet, cert-manager-cmctl, gomplate, kots, trivy, kaniko, cilium-cli,...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-push, rancher-fleet, kuma, cert-manager-cmctl, zarf, flux-source-controller, flux, kots...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-push, rancher-fleet, kuma, cert-manager-cmctl, zarf, flux-source-controller, flux, kots...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-operator, k8ssandra-client, helm-push, zarf, istio, zot, cerbos, rancher-fleet, k8sgpt, cert-manager-cmctl, linkerd2, rancher-helm, k9s, kots, trivy, cilium-cli, helm-docs, eksctl, tw, flux-helm-controller, kargo, chartmuseum, pluto, cluster-api-helm-controller,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: spicedb, argocd-image-updater, crossplane-provider-aws-iam, spire-controller-manager, terraform-provider-tls, zarf, cluster-api-provider-vsphere, kubernetes-csi-driver-nfs, cluster-api-aws-controller, fscrypt, rancher-agent, containerd, libnvidia-container,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, grpcurl, ferretdb, crossplane-provider-aws-iam, fluxcd-kustomize-mutating-webhook, spire-controller-manager, gitleaks, nri-mongodb, local-path-provisioner, vault-k8s, paranoia, timescaledb-parallel-copy, crossplane-provider-sql,...

CLEANSTART-2026-JL48383 Security fixes in cert-manager-cmctl-fips 2.5.0-r1

Package cert-manager-cmctl-fips version 2.5.0-r1 fixes 7 vulnerabilities: ghsa-jxpm-75mh-9fp7, ghsa-8xwf-rjm4-xvhv, ghsa-xf85-363p-868w, ghsa-vh4v-2xq2-g5cg, CVE-2026-50151...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, fluxcd-kustomize-mutating-webhook, stern, kubernetes-csi-driver-nfs, podman, fscrypt, timescaledb-parallel-copy, libnvidia-container, kserve-modelmesh-serving, vault-secrets-webhook, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, fluxcd-kustomize-mutating-webhook, stern, kubernetes-csi-driver-nfs, podman, fscrypt, timescaledb-parallel-copy, libnvidia-container, kserve-modelmesh-serving, vault-secrets-webhook, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, crossplane-provider-aws-iam, argo-workflows, zarf, wolfictl, crossplane-provider-family-azure, crossplane-provider-aws-sqs, pulumi-language-dotnet, crossplane-provider-aws-elasticache, kyverno, cluster-api, pulumi-language-yaml,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: argocd-image-updater, crossplane-provider-aws-iam, argo-workflows, zarf, wolfictl, crossplane-provider-family-azure, crossplane-provider-aws-sqs, pulumi-language-dotnet, crossplane-provider-aws-elasticache, kyverno, cluster-api, pulumi-language-yaml,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, melange, xeol-fips, cg, docker-cli-buildx-fips, grype, hydra-fips, omnictl-multiarch-fips, terraform-provider-pagerduty, gitlab-runner, ratify-fips, helm-fips, cluster-api-fips, terraform-provider-databricks-fips, grafana,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, opentelemetry-operator-fips, step-issuer-fips, mariadb-operator-fips, aws-privateca-issuer, gitlab-operator-fips, cert-manager-csi-driver, percona-xtradb-cluster-operator, percona-server-mongodb-operator-fips, cert-manager-cmctl-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, opentelemetry-operator, cert-manager-istio-csr, cert-manager-cmctl, step-issuer, mariadb-operator, cert-manager-webhook-pdns, percona-server-mongodb-operator, cert-manager-csi-driver...