GO-2025-4116 vulnerabilities

Vulnerabilities for packages: consul-k8s, gitlab-rails-ce, rke2-runtime-fips, terraform, etcd-fips, etcd, k3s, falco-no-driver, cert-manager-fips, gitlab-rails-ce-fips, vault, backup-restore-operator, kube-conformance...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, nova, flux-operator-fips, podinfo, victorialogs-fips, dkron, flux-operator, cert-manager-fips, flux-fips, victoriametrics-fips, nova-fips, go, victoriametrics-cluster, librechat, gotenberg, grafana-operator, polaris,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: calico, rancher-agent, newrelic-fluent-bit-output, cert-manager-fips, external-secrets-operator-fips, istio, aactl, aws-flb-kinesis, chezmoi, azuredisk-csi, jaeger-fips, commercial-chainloop-cli, tekton-pipelines-fips, telegraf, net-kourier, kaf,...

CLEANSTART-2026-HT22809 Security fixes in cert-manager-fips 1.19.2-r0

Package cert-manager-fips version 1.19.2-r0 fixes 1 vulnerabilities: CVE-2026-27141...

CLEANSTART-2026-QV66806 Security fixes in cert-manager-fips 1.19.1-r0

Package cert-manager-fips version 1.19.1-r0 fixes 16 vulnerabilities: CVE-2025-61729, CVE-2025-61725, CVE-2025-61723, CVE-2025-58188, CVE-2025-58187...

CLEANSTART-2026-AG74269 Security fixes in cert-manager-fips 1.17.4-r1

Package cert-manager-fips version 1.17.4-r1 fixes 24 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, CVE-2026-24051, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: openbao-fips, rancher-agent, juicefs, cert-manager-fips, external-secrets-operator-fips, syncthing, vault-fips, seaweedfs-fips, cert-manager-csi-driver, dex, telegraf, cert-manager, teleport, beats-fips, packer, ldap2pg, cert-manager-google-cas-issuer, bento-fips,...

CLEANSTART-2026-DS01292 Security fixes for CVE-2025-47910, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-24051, CVE-2026-27141, ghsa-9h8m-3fm2-qjrq applied in versions: 1.19.1-r0, 1.19.2-r0, 1.19.2-r1

Multiple security vulnerabilities affect the cert-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: calico, helm-diff, rancher-agent, timoni, newrelic-fluent-bit-output, cert-manager-fips, gitness, external-secrets-operator-fips, aactl, syncthing, aws-flb-kinesis, telegraf, gitlab-workhorse-ce-fips, aws-flb-kinesis-fips, kubernetes-dashboard-api-fips,...

CLEANSTART-2026-YC48827 Within HostnameError

Multiple security vulnerabilities affect the cert-manager-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DP30290 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the cert-manager-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: step-issuer, cert-exporter, cert-exporter-fips, aws-privateca-issuer, cert-manager-cmctl-fips, cert-manager-webhook-pdns, step-issuer-fips, aws-privateca-issuer-fips, cert-manager-istio-csr, cert-manager-webhook-pdns-fips, cert-manager-cmctl...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: consul-k8s, gitlab-rails-ce, rke2-runtime-fips, terraform, etcd-fips, etcd, k3s, falco-no-driver, cert-manager-fips, gitlab-rails-ce-fips, vault, backup-restore-operator, kube-conformance...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: consul-k8s, gitlab-rails-ce, rke2-runtime-fips, terraform, etcd-fips, etcd, k3s, falco-no-driver, cert-manager-fips, gitlab-rails-ce-fips, vault, backup-restore-operator, kube-conformance...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, crossplane-provider-aws-memorydb, gotenberg, crossplane-provider-aws-kms, terraform-provider-aws, conftest-fips, nfs-subdir-external-provisioner, prometheus-alertmanager-fips, kubernetes-dashboard-fips, terraform-docs, k3d,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: nerdctl, cri-tools, newrelic-infrastructure-agent, bom, ko-fips, k8sgpt, guac, timoni, loki, argo-workflows-fips, falcoctl, aactl, docker-machine-driver-harvester, kpt, docker-credential-gcr, goreleaser, argo-workflows, crane, skopeo, tekton-chains, up, helm, k9s,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: nerdctl, cri-tools, newrelic-infrastructure-agent, bom, ko-fips, k8sgpt, guac, timoni, loki, argo-workflows-fips, falcoctl, aactl, docker-machine-driver-harvester, kpt, docker-credential-gcr, goreleaser, argo-workflows, crane, skopeo, tekton-chains, up, helm, k9s,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: slsa-verifier, skaffold, up, tekton-chains, bom, falcoctl-fips, ctop, chartmuseum, k3s, paranoia, scorecard, kubescape, k3d, spire-server-fips, aactl, kpt...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, timoni, gitness, falcoctl, wavefront-collector-for-kubernetes, aactl, grpcurl, up, kubernetes-csi-livenessprobe-fips, pulumi-language-yaml, dex, dynamic-localpv-provisioner, kaf, dex-k8s-authenticator, prometheus-operator,...