GO-2025-4116 vulnerabilities

Vulnerabilities for packages: terraform, cert-manager-fips, backup-restore-operator, vault, consul-k8s, gitlab-rails-ce-fips, gitlab-rails-ce, rke2-runtime-fips, falco-no-driver, etcd, etcd-fips, k3s...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, flux-source-watcher, victorialogs-fips, cert-manager-fips, flux-image-reflector-controller, metacontroller, omnictl-multiarch, amazon-k8s-cni-fips, flux-source-controller, localstack, aws-load-balancer-controller-fips,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: knative-eventing, kaf, kube-state-metrics, aws-flb-firehose, spire-server, net-kourier, argo-cd-fips, terraform, karpenter-fips, cloud-provider-azure-fips, commercial-chainloop-backend, kine, argo-workflows-fips, newrelic-fluent-bit-output, cluster-autoscaler,...

CLEANSTART-2026-HT22809 Security fixes in cert-manager-fips 1.19.2-r0

Package cert-manager-fips version 1.19.2-r0 fixes 1 vulnerabilities: CVE-2026-27141...

CLEANSTART-2026-AG74269 Security fixes in cert-manager-fips 1.17.4-r1

Package cert-manager-fips version 1.17.4-r1 fixes 24 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, CVE-2026-24051, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-QV66806 Security fixes in cert-manager-fips 1.19.1-r0

Package cert-manager-fips version 1.19.1-r0 fixes 16 vulnerabilities: CVE-2025-61729, CVE-2025-61725, CVE-2025-61723, CVE-2025-58188, CVE-2025-58187...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: openbao-fips, juicefs, trufflehog-fips, agentbeat, syncthing-fips, minio-fips, packer-fips, cert-manager-cmctl, terraform, ratify-fips, versitygw, dex-fips, k6, rancher-webhook, gitea, cloudbeat-fips, sftpgo-plugin-auth, versitygw-fips, k6-fips,...

CLEANSTART-2026-DS01292 Security fixes for CVE-2025-47910, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-24051, CVE-2026-27141, ghsa-9h8m-3fm2-qjrq applied in versions: 1.19.1-r0, 1.19.2-r0, 1.19.2-r1

Multiple security vulnerabilities affect the cert-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: thanos-operator-fips, kube-state-metrics, omnictl-multiarch, spire-server, skaffold-fips, trufflehog-fips, apm-server-fips, agentbeat, syncthing-fips, argo-cd-fips, packer-fips, cert-manager-cmctl, flux-kustomize-controller-fips, terraform, kine,...

CLEANSTART-2026-YC48827 Within HostnameError

Multiple security vulnerabilities affect the cert-manager-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DP30290 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the cert-manager-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer-fips, aws-privateca-issuer, cert-manager-cmctl, step-issuer-fips, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer, cert-exporter, cert-manager-cmctl-fips, cert-exporter-fips, cert-manager-webhook-pdns-fips...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: terraform, cert-manager-fips, backup-restore-operator, vault, consul-k8s, gitlab-rails-ce-fips, gitlab-rails-ce, rke2-runtime-fips, falco-no-driver, etcd, etcd-fips, k3s...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: terraform, cert-manager-fips, backup-restore-operator, vault, consul-k8s, gitlab-rails-ce-fips, gitlab-rails-ce, rke2-runtime-fips, falco-no-driver, etcd, etcd-fips, k3s...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: cortex, kargo, nri-kubernetes, cloud-sql-proxy-fips, cloudflared, smarter-device-manager-fips, weaviate, smarter-device-manager, tigera-operator, prometheus-redis-exporter-fips, hugo-extended, cilium, timoni, atlantis, kube-logging-operator, gh, haproxy-ingress,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: up, policy-controller, flux-image-reflector-controller, nerdctl, crane, kargo, ko-fips, kpt, docker-machine-driver-harvester, gitsign, vexctl, eksctl, buildkitd, docker-credential-gcr, falcoctl-fips, kots, helm-operator, guac, k8sgpt, kubescape, skaffold, dagger,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: up, policy-controller, flux-image-reflector-controller, nerdctl, crane, kargo, ko-fips, kpt, docker-machine-driver-harvester, gitsign, vexctl, eksctl, buildkitd, docker-credential-gcr, falcoctl-fips, kots, helm-operator, guac, k8sgpt, kubescape, skaffold, dagger,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: bom, up, slsa-verifier, chartmuseum, paranoia, tekton-chains, kpt, kubescape, k3d, aactl, ctop, skaffold, scorecard, spire-server-fips, falcoctl-fips, k3s...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: dive, vault-csi-provider, kaf, kube-state-metrics, prometheus-stackdriver-exporter, memcached-exporter, falcoctl-fips, smarter-device-manager-fips, terraform, weaviate, hugo, kubernetes-csi-livenessprobe-fips, flux-kustomize-controller, flux-helm-controller, rqlite,...