GO-2026-5566 vulnerabilities

Vulnerabilities for packages: gitlab-operator, rancher-fleet-fips, kuma, flux-source-controller, kots, flux-fips, flux, helm-push, flux-source-controller-fips, cilium-cli, gitlab-operator-fips, cert-manager-cmctl-fips, helm-diff-fips, zarf-fips, helm-diff, cert-manager-cmctl, zarf, rancher-fleet...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, k9s, cluster-api-helm-controller-fips, kyverno-fips, steampipe, kubescape-server-fips, k8ssandra-client-fips, xeol-fips, zarf, xeol, rancher, maru, drone, chaos-mesh-fips, jfrog-cli, cert-manager-cmctl-fips, conftest, helm-mapkubeapis, ocm-cli-fip...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, cilium-cli, kargo, dagger, cert-manager-cmctl, sops, step-ca, cloudnative-pg, zot, dbmate, opa, kots, pulumi-language-dotnet, trivy, rqlite, dex, opentelemetry-collector, grafana-mimir, guac, k3d, terraform-provider-google,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: cilium-cli, cert-manager-cmctl, k8ssandra-client, k9s, rancher-helm, zot, kots, trivy, flux-source-controller, helm-push, zarf, helm-operator, eksctl, helm-docs, cluster-api-helm-controller, pluto, kubescape, flux, flux-helm-controller, tw, chart-testing, chartmuseum...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux, cilium-cli, cert-manager-cmctl, flux-source-controller, helm-push, kuma, zarf, kots, rancher-fleet...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: flux, cilium-cli, cert-manager-cmctl, flux-source-controller, helm-push, kuma, zarf, kots, rancher-fleet...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cilium-cli, kargo, cert-manager-cmctl, k8ssandra-client, k9s, rancher-helm, zot, kots, trivy, flux-source-controller, helm-push, envoy-gateway, istio, zarf, helm-operator, k8sgpt, eksctl, helm-docs, cerbos, cluster-api-helm-controller, pluto, linkerd2, rancher-fleet,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, polaris, gogatekeeper, rancher-agent, azcopy, kubo, cilium, argo-events, net-kourier, rancher-helm, crossplane-provider-aws-s3, sftpgo-plugin-auth, knative-client, cadvisor, pulumi-kubernetes-operator, grafana-rollout-operator, metrics-server,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: blobfuse2, amass, pvc-autoresizer, manifest-tool, ipfs-cluster, gogatekeeper, mongodb-kubernetes-operator, azcopy, kubernetes-replicator, cluster-api-ipam-provider-in-cluster, kubo, rancher-helm, crossplane-provider-aws-s3, dbmate, sftpgo-plugin-auth,...

CLEANSTART-2026-JL48383 Security fixes in cert-manager-cmctl-fips 2.5.0-r1

Package cert-manager-cmctl-fips version 2.5.0-r1 fixes 7 vulnerabilities: ghsa-jxpm-75mh-9fp7, ghsa-8xwf-rjm4-xvhv, ghsa-xf85-363p-868w, ghsa-vh4v-2xq2-g5cg, CVE-2026-50151...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, rancher-agent, kubernetes-replicator, cilium, custom-pod-autoscaler-operator, net-kourier, zot, azure-workload-identity-webhook, frp, kuberlr, yunikorn-k8shim, pgtimetable, grafana-agent-operator, syft, kube-vip, postgres-operator, db-operator,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, rancher-agent, kubernetes-replicator, cilium, custom-pod-autoscaler-operator, net-kourier, zot, azure-workload-identity-webhook, frp, kuberlr, yunikorn-k8shim, pgtimetable, grafana-agent-operator, syft, kube-vip, postgres-operator, db-operator,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: argo-events, crossplane-provider-aws-s3, zot, pulumi-kubernetes-operator, wolfictl, crossplane-provider-aws-rds, trivy, crossplane-provider-aws-kinesis, trufflehog, argo-rollouts, crossplane-provider-aws-cloudformation, crossplane-provider-aws-lambda, syft, vcluster,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-events, crossplane-provider-aws-s3, zot, pulumi-kubernetes-operator, wolfictl, crossplane-provider-aws-rds, trivy, crossplane-provider-aws-kinesis, trufflehog, argo-rollouts, crossplane-provider-aws-cloudformation, crossplane-provider-aws-lambda, syft, vcluster,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: k9s, crossplane-provider-aws-firehose-fips, kyverno-fips, gomplate-fips, crossplane-provider-aws-sns, grype-fips, argo-workflows, pulumi-language-java, gitlab-rails-ce, kubescape-server-fips, syft-fips, crossplane-provider-aws-memorydb-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer-fips, step-issuer, cert-manager-openshift-routes-fips, percona-xtradb-cluster-operator, percona-xtradb-cluster-operator-fips, percona-server-mongodb-operator-fips, step-issuer-fips, percona-server-mongodb-operator, opentelemetry-operator-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, aws-privateca-issuer, cert-manager-istio-csr, cert-manager-webhook-pdns, opentelemetry-operator, cert-manager-csi-driver, percona-server-mongodb-operator, mariadb-operator, step-issuer...