GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cert-manager-csi-driver, cert-manager-istio-csr, opentelemetry-operator, aws-privateca-issuer, percona-server-mongodb-operator, cert-manager-webhook-pdns, step-issuer, mariadb-operator...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, osv-scanner, bento, ferretdb, cilium-cli, k8sgateway, spire-server, opentofu, timoni, falco-no-driver, croc, bom, goreleaser, opensearch-k8s-operator, hubble, terraform, terraform-provider-pagerduty, cert-manager-cmctl, aws-flb-cloudwatch,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, wuzz, traefik, bento, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, crossplane-provider-aws-cloudformation, git-sync, cluster-api-ipam-provider-in-cluster, manifest-tool, kubernetes-csi-livenessprobe,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: step-kms-plugin, wuzz, traefik, bento, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, crossplane-provider-aws-cloudformation, git-sync, cluster-api-ipam-provider-in-cluster, manifest-tool, kubernetes-csi-livenessprobe,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: wuzz, ferretdb, stakater-reloader, nri-memcached, nginx-prometheus-exporter, terraform-provider-pagerduty, kubernetes-dashboard-metrics-scraper, postgres-operator, cert-manager-istio-csr, helm, age, litestream, timescaledb-tune, hubble-ui, kine, telegraf,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: wuzz, ferretdb, stakater-reloader, nri-memcached, nginx-prometheus-exporter, terraform-provider-pagerduty, kubernetes-dashboard-metrics-scraper, postgres-operator, cert-manager-istio-csr, helm, age, litestream, timescaledb-tune, hubble-ui, kine, telegraf,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, wuzz, traefik, bento, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, crossplane-provider-aws-cloudformation, git-sync, cluster-api-ipam-provider-in-cluster, manifest-tool, kubernetes-csi-livenessprobe,...

CLEANSTART-2026-OH86281 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-LL43287 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-EJ58111 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cert-manager-istio-csr, aws-privateca-issuer, cert-manager-webhook-pdns, step-issuer, cert-exporter...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, cert-exporter, cert-exporter-fips, step-issuer-fips, aws-privateca-issuer, cert-manager-istio-csr, cert-manager-webhook-pdns, step-issuer, aws-privateca-issuer-fips, cert-manager-webhook-pdns-fips, cert-manager-cmctl...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: wuzz, skopeo, ferretdb, stakater-reloader, kubernetes-dashboard-metrics-scraper, age, gotestsum, dagdotdev, timescaledb-tune, buildkitd, istio, oauth2-proxy, terraform-provider-azapi, mongodb-kubernetes-operator, secrets-store-csi-driver-provider-gcp, nuclei,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...