51 matches found
CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3
Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: multus-cni, ip-masq-agent, spire-server, ghaudit, nri-discovery-kubernetes, haproxy-ingress, crossplane-provider-azure-authorization, kine, kuberlr, aws-sigv4-proxy, calico, infinispan-operator, aws-flb-kinesis, http-echo, custom-pod-autoscaler-operator,...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: multus-cni, ip-masq-agent, spire-server, ghaudit, nri-discovery-kubernetes, haproxy-ingress, crossplane-provider-azure-authorization, kine, kuberlr, aws-sigv4-proxy, infinispan-operator, aws-flb-kinesis, http-echo, custom-pod-autoscaler-operator, knative-eventing,...
CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2
Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: trivy, zarf, wal-g, crossplane-provider-family-aws, terraform-provider-azuread, crossplane-provider-aws-memorydb, nfpm, cluster-api, crossplane-provider-aws-elasticache, q, crossplane-provider-azure-authorization, dagger, xeol, flux-image-automation-controller,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: trivy, zarf, wal-g, crossplane-provider-family-aws, terraform-provider-azuread, crossplane-provider-aws-memorydb, nfpm, cluster-api, crossplane-provider-aws-elasticache, q, crossplane-provider-azure-authorization, dagger, xeol, flux-image-automation-controller,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: kyverno, crossplane-provider-aws-s3, hydra-fips, grype-db, argo-rollouts, crossplane-provider-family-aws, kyverno-notation-aws, terraform-provider-azurerm-fips, crossplane-provider-keycloak, crossplane-fips, flux-kustomize-controller-fips, grafana-alloy-fips, sops,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: mariadb-operator, percona-server-mongodb-operator-fips, cert-manager-webhook-pdns, cert-manager-webhook-pdns-fips, cert-manager-csi-driver-fips, opentelemetry-operator-fips, cert-manager-cmctl-fips, cert-manager-cmctl, aws-privateca-issuer,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr, percona-server-mongodb-operator, aws-privateca-issuer, mariadb-operator, cert-manager-csi-driver, cert-manager-webhook-pdns, cert-manager-cmctl, step-issuer, opentelemetry-operator...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr, percona-server-mongodb-operator, aws-privateca-issuer, mariadb-operator, cert-manager-csi-driver, cert-manager-webhook-pdns, cert-manager-cmctl, step-issuer, opentelemetry-operator...
GHSA-G9Q4-QJX4-2V7Q vulnerabilities
Vulnerabilities for packages: terraform, falco-no-driver, kubo, vale, kube-arangodb, flux-kustomize-controller, external-dns, cert-manager-cmctl, headlamp, minio, spire-server, k3s, redis-operator, opentofu, kubernetes-dns-node-cache, fuse-overlayfs-snapshotter, hubble, tfsec, cosign, mc,...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: nats-top, kapp-controller, docker-credential-gcr, sbom-convert, crossplane-provider-family-aws, falcosidekick, kubo, gatekeeper, kubernetes-csi-driver-nfs, nginx-prometheus-exporter, metacontroller, x509-certificate-exporter, ip-masq-agent, external-dns,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: ip-masq-agent, wire-go, spire-server, ghaudit, crossplane-provider-aws-elasticache, kine, traefik, restic, kuberlr, aws-sigv4-proxy, calico, aws-flb-kinesis, http-echo, ini-file, sbom-scorecard, flannel, swagger, wazero, confluent-cp-docker-utils, hey,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: nats-top, kapp-controller, nri-rabbitmq, nri-couchbase, docker-credential-gcr, nri-redis, crossplane-provider-family-aws, falcosidekick, kubo, gatekeeper, kubernetes-csi-driver-nfs, nginx-prometheus-exporter, metacontroller, x509-certificate-exporter, ip-masq-agent,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: ip-masq-agent, wire-go, spire-server, ghaudit, crossplane-provider-aws-elasticache, kine, traefik, restic, kuberlr, aws-sigv4-proxy, calico, aws-flb-kinesis, http-echo, ini-file, sbom-scorecard, flannel, swagger, wazero, confluent-cp-docker-utils, hey,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: nats-top, kapp-controller, docker-credential-gcr, sbom-convert, crossplane-provider-family-aws, falcosidekick, kubo, gatekeeper, kubernetes-csi-driver-nfs, nginx-prometheus-exporter, metacontroller, x509-certificate-exporter, ip-masq-agent, external-dns,...
CLEANSTART-2026-OH86281 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...
CLEANSTART-2026-LL43287 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...
CLEANSTART-2026-EJ58111 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...