AZL-75389 CVE-2025-11065 affecting package cert-manager for versions less than 1.12.15-6

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: kots, flux-fips, kuma, chart-testing-fips, tw, flux-source-controller, flux, flux-source-controller-fips, trivy-fips, zarf, eksctl, zot, helm-push, flux-helm-controller-fips, consul-k8s, cluster-api-helm-controller-fips, trivy, k8ssandra-client-fips, chart-testing,...

CVE-2024-45337 affecting package cert-manager for versions less than 1.12.13-2

CVE-2024-45337 affecting package cert-manager for versions less than 1.12.13-2. A patched version of the package is available...

CVE-2024-24786 affecting package cert-manager for versions less than 1.11.2-14

CVE-2024-24786 affecting package cert-manager for versions less than 1.11.2-14. A patched version of the package is available...