GO-2026-5566 vulnerabilities

Vulnerabilities for packages: gitlab-operator, zarf, kuma, cert-manager-cmctl-fips, gitlab-operator-fips, helm-push, flux-fips, cert-manager-cmctl, flux-source-controller-fips, flux, kots, helm-diff, rancher-fleet-fips, zarf-fips, rancher-fleet, cilium-cli, flux-source-controller, helm-diff-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: xeol-fips, cloudbeat-fips, trivy-fips, consul-k8s-fips, chartmuseum-fips, drone, teleport, argocd-image-updater-fips, ocm-cli, kyverno-notation-aws-fips, zarf, conftest-fips, redpanda-operator, oras-fips, gogatekeeper, argo-cd-fips, envoy-gateway, oras,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, k9s, chartmuseum, zot, flux-helm-controller, flux-source-controller, kots, helm-operator, pluto, rancher-helm, kubescape, cluster-api-helm-controller, cilium-cli, eksctl, k8ssandra-client, chart-testing, helm-docs, tw, zarf, helm-push, trivy, flux...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dbmate, terraform-docs, osv-scanner, cert-manager-cmctl, fulcio, restic, vcluster, cloudnative-pg, grafana-mimir, kots, spicedb, grpc-health-probe, terragrunt, rqlite, ferretdb, dagger, grafana-agent-operator, opa, step, pulumi-language-dotnet, k8sgpt, spire-server,...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: kuma, cert-manager-cmctl, kots, zarf, flux-source-controller, cilium-cli, rancher-fleet, flux, helm-push...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: kuma, cert-manager-cmctl, kots, zarf, flux-source-controller, cilium-cli, rancher-fleet, flux, helm-push...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, k9s, chartmuseum, flux-helm-controller, flux-source-controller, kots, helm-operator, cerbos, pluto, rancher-helm, k8sgpt, cluster-api-helm-controller, cilium-cli, eksctl, k8ssandra-client, chart-testing, helm-docs, tw, zarf, istio, rancher-fleet,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, kube-arangodb, lvm-driver, crossplane-provider-aws-ec2, falcoctl, kubevela, kube-fluentd-operator, sftpgo-plugin-eventsearch, memcached-exporter, kubernetes-dashboard, mattermost, flux-helm-controller, azuredisk-csi,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: dbmate, cosign, lvm-driver, rabbitmq-cluster-operator, crossplane-provider-aws-ec2, kustomize, helm-set-status, grpcurl, vault-k8s, kubernetes-dashboard, azure-workload-identity-webhook, mattermost, gptscript, flux-notification-controller, ytt, sftpgo-plugin-auth,...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: portieris, kube-fluentd-operator, vault-k8s, memcached-exporter, supercronic, flux-notification-controller, sftpgo-plugin-auth, delve, kuberlr, rabbitmq-default-user-credential-updater, yace, knative-client, victoriametrics-cluster, vexctl, nri-discovery-kubernetes,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: portieris, kube-fluentd-operator, vault-k8s, memcached-exporter, supercronic, flux-notification-controller, sftpgo-plugin-auth, delve, kuberlr, rabbitmq-default-user-credential-updater, yace, knative-client, victoriametrics-cluster, vexctl, nri-discovery-kubernetes,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, docker, k9s, kubevela, vcluster, grype, flux-helm-controller, crossplane-provider-azure-storage, gptscript, flux-notification-controller, terragrunt, crossplane-provider-aws-sns, gitea, rclone, grafana-alloy, aactl, sops, witness,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, docker, k9s, kubevela, vcluster, grype, flux-helm-controller, crossplane-provider-azure-storage, gptscript, flux-notification-controller, terragrunt, crossplane-provider-aws-sns, gitea, rclone, grafana-alloy, aactl, sops, witness,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: src-fingerprint-fips, xeol-fips, crossplane-provider-aws-sqs, pulumi-language-java, argo-events-fips, argo-rollouts-fips, argo-events, omni, cloudbeat-fips, crossplane-provider-azure-sql, cg, trivy-fips, crossplane-provider-aws-sqs-fips, q,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: mariadb-operator, percona-xtradb-cluster-operator-fips, cert-manager-google-cas-issuer, cert-manager-openshift-routes-fips, percona-server-mongodb-operator, cert-manager-webhook-pdns-fips, aws-privateca-issuer, step-issuer, aws-privateca-issuer-fips, gitlab-operator,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, cert-manager-cmctl, step-issuer, cert-manager-istio-csr, percona-server-mongodb-operator, aws-privateca-issuer, cert-manager-csi-driver, mariadb-operator, opentelemetry-operator...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, cert-manager-cmctl, step-issuer, cert-manager-istio-csr, percona-server-mongodb-operator, aws-privateca-issuer, cert-manager-csi-driver, mariadb-operator, opentelemetry-operator...