CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: dex, harbor-fips, neuvector, syncthing, external-secrets-operator, neuvector-fips, seaweedfs-rocksdb, rancher-agent, cert-manager-cmctl, cert-manager-google-cas-issuer-fips, minio-fips, elastic-agent, cert-manager-csi-driver-fips, trufflehog-fips,...

CLEANSTART-2026-DS01292 Security fixes for CVE-2025-47910, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-24051, CVE-2026-27141, ghsa-9h8m-3fm2-qjrq applied in versions: 1.19.1-r0, 1.19.2-r0, 1.19.2-r1

Multiple security vulnerabilities affect the cert-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: kube-logging-logging-operator, vitess, omnictl-multiarch, flux-image-automation-controller, thanos-operator-fips, ferretdb, syncthing, argo-rollouts-fips, external-secrets-operator, redis-operator-fips, consul, prometheus-mongodb-exporter, mc, rancher-agent,...

CLEANSTART-2026-YC48827 Within HostnameError

Multiple security vulnerabilities affect the cert-manager-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DP30290 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the cert-manager-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager, cert-manager-webhook-pdns, cert-exporter-fips, cert-manager-webhook-pdns-fips, cert-manager-fips, step-issuer, cert-manager-cmctl, cert-manager-istio-csr, step-issuer-fips, cert-exporter, cert-manager-cmctl-fips, aws-privateca-issuer-fips,...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, backup-restore-operator, gitlab-rails-ce, etcd-fips, rke2-runtime-fips, cert-manager-fips, k3s, vault, falco-no-driver, terraform, etcd, consul-k8s...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, backup-restore-operator, gitlab-rails-ce, etcd-fips, rke2-runtime-fips, cert-manager-fips, k3s, vault, falco-no-driver, terraform, etcd, consul-k8s...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kots, stakater-reloader, flux-image-automation-controller, cadvisor, kube-rbac-proxy-fips, crossplane, nats, protoc-gen-go-grpc, crossplane-provider-azure-authorization, aws-load-balancer-controller, prometheus-stackdriver-exporter...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: cert-manager, cosign-fips, kots, falco, bom, buildkitd, nerdctl, tekton-chains, vexctl, kpt, trivy, cadvisor, kargo, k9s, ctop, loki, policy-controller, cert-manager-fips, k3s, k3d, falcoctl-fips, helm, scorecard, argo-workflows-fips, flux-helm-controller, goreleaser...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: cert-manager, cosign-fips, kots, falco, bom, buildkitd, nerdctl, tekton-chains, vexctl, kpt, trivy, cadvisor, kargo, k9s, ctop, loki, policy-controller, cert-manager-fips, k3s, k3d, falcoctl-fips, helm, scorecard, argo-workflows-fips, flux-helm-controller, goreleaser...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: cert-manager, falco, spire-server-fips, bom, tekton-chains, kpt, ctop, k3s, k3d, falcoctl-fips, rancher-agent, scorecard, slsa-verifier, kubescape, chartmuseum, paranoia, up, aactl, skaffold...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kube-logging-logging-operator, wavefront-collector-for-kubernetes, dex, kots, stakater-reloader, flux-image-automation-controller, dive, terraform-provider-sendgrid, buildkitd, nodetaint, kube-oidc-proxy, secrets-store-csi-driver-provider-gcp,...