GO-2025-4116 vulnerabilities

Vulnerabilities for packages: backup-restore-operator, consul-k8s, cert-manager-fips, kube-conformance, etcd, k3s, terraform, falco-no-driver, vault, rke2-runtime-fips, gitlab-rails-ce-fips, gitlab-rails-ce, etcd-fips...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: pgwatch, flux-image-reflector-controller, cert-manager-fips, victoriametrics-cluster, amazon-k8s-cni-fips, gotenberg, aws-ebs-csi-driver, omnictl-multiarch, stakater-reloader, metacontroller, flux-notification-controller, nova, grafana-rollout-operator,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: kubescape, newrelic-fluent-bit-output-fips, traefik, kubernetes-dashboard, kaf, istio-fips, rke2-runtime, keda, kubernetes-csi-node-driver-registrar-fips, libnvidia-container-fips, kine, prometheus, loki, karpenter-fips, gitaly, terraform, gosu, buildkite-agent-fips,...

CLEANSTART-2026-HT22809 Security fixes in cert-manager-fips 1.19.2-r0

Package cert-manager-fips version 1.19.2-r0 fixes 1 vulnerabilities: CVE-2026-27141...

CLEANSTART-2026-QV66806 Security fixes in cert-manager-fips 1.19.1-r0

Package cert-manager-fips version 1.19.1-r0 fixes 16 vulnerabilities: CVE-2025-61729, CVE-2025-61725, CVE-2025-61723, CVE-2025-58188, CVE-2025-58187...

CLEANSTART-2026-AG74269 Security fixes in cert-manager-fips 1.17.4-r1

Package cert-manager-fips version 1.17.4-r1 fixes 24 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, CVE-2026-24051, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, bento, percona-server-mongodb-operator, seaweedfs-rocksdb, terraform, syncthing-fips, xeol, grafana, cloudbeat-fips, versitygw, packer-fips, harbor, flux-fips, yunikorn-k8shim, spqr, telegraf, grafana-fips, dex, seaweedfs, cert-manager-cmctl,...

CLEANSTART-2026-DS01292 Security fixes for CVE-2025-47910, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-24051, CVE-2026-27141, ghsa-9h8m-3fm2-qjrq applied in versions: 1.19.1-r0, 1.19.2-r0, 1.19.2-r1

Multiple security vulnerabilities affect the cert-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, kubo-fips, bento, newrelic-fluent-bit-output-fips, traefik, kubernetes-dashboard, rke2-runtime, kubo, kine, vale, prometheus, redis-operator-fips, loki, terraform, syncthing-fips, gosu, xeol, azure-aad-pod-identity-mic, cloudbeat-fips,...

CLEANSTART-2026-YC48827 Within HostnameError

Multiple security vulnerabilities affect the cert-manager-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DP30290 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the cert-manager-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: step-issuer, cert-manager-cmctl-fips, cert-manager-istio-csr, cert-manager-webhook-pdns-fips, cert-exporter-fips, step-issuer-fips, aws-privateca-issuer, aws-privateca-issuer-fips, cert-manager-cmctl, cert-manager-webhook-pdns, cert-exporter...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: backup-restore-operator, consul-k8s, cert-manager-fips, kube-conformance, etcd, k3s, terraform, falco-no-driver, vault, rke2-runtime-fips, gitlab-rails-ce-fips, gitlab-rails-ce, etcd-fips...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: backup-restore-operator, consul-k8s, cert-manager-fips, kube-conformance, etcd, k3s, terraform, falco-no-driver, vault, rke2-runtime-fips, gitlab-rails-ce-fips, gitlab-rails-ce, etcd-fips...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, wavefront-collector-for-kubernetes, kubescape, timestamp-authority, hubble-ui-backend-fips, trillian-fips, metallb, secrets-store-csi-driver-provider-azure, kine, request-1279, rqlite, dynamic-localpv-provisioner, kube-fluentd-operator,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: kots, falcoctl, flux-image-reflector-controller, kubescape, skaffold, gitsign, helm-operator, k3s, skopeo, crane, docker-machine-driver-harvester, rancher-machine, argo-workflows-fips, k8sgpt, slsa-verifier, zarf, cri-tools, newrelic-infrastructure-agent, cadvisor,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: kots, falcoctl, flux-image-reflector-controller, kubescape, skaffold, gitsign, helm-operator, k3s, skopeo, crane, docker-machine-driver-harvester, rancher-machine, argo-workflows-fips, k8sgpt, slsa-verifier, zarf, cri-tools, newrelic-infrastructure-agent, cadvisor,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: kubescape, skaffold, aactl, k3s, tekton-chains, falcoctl-fips, up, chartmuseum, ctop, bom, k3d, paranoia, scorecard, slsa-verifier, spire-server-fips, kpt...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: falcoctl, wavefront-collector-for-kubernetes, trillian, kubescape, secrets-store-csi-driver-provider-gcp, kubernetes-ingress-defaultbackend, kubernetes-dashboard, kubernetes-csi-livenessprobe-fips, kaf, stakater-reloader, metacontroller, trust-manager,...