GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: kbld, authservice, rancher-loglevel, step, traefik, crossplane-provider-sql, azurefile-csi, chart-testing, nerdctl, podinfo, terraform-provider-pagerduty, newrelic-infra-operator, influx, aws-privateca-issuer, ratify, swagger, crossplane-provider-aws-ec2,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: rancher-loglevel, traefik, kube-logging-operator, nerdctl, ctop, ferretdb, vertical-pod-autoscaler, http-echo, fixuid, osv-scanner, sbomqs, custom-pod-autoscaler, kuberlr, aws-sigv4-proxy, kserve-modelmesh-serving, descheduler, k3d, octo-sts,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: kbld, authservice, rancher-loglevel, step, traefik, crossplane-provider-sql, azurefile-csi, chart-testing, nerdctl, podinfo, terraform-provider-pagerduty, newrelic-infra-operator, influx, aws-privateca-issuer, ratify, swagger, crossplane-provider-aws-ec2,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: rancher-loglevel, traefik, kube-logging-operator, nerdctl, ctop, ferretdb, vertical-pod-autoscaler, http-echo, fixuid, osv-scanner, sbomqs, custom-pod-autoscaler, kuberlr, aws-sigv4-proxy, kserve-modelmesh-serving, descheduler, k3d, octo-sts,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: kbld, authservice, rancher-loglevel, step, traefik, crossplane-provider-sql, azurefile-csi, chart-testing, kube-logging-operator, nerdctl, podinfo, terraform-provider-pagerduty, newrelic-infra-operator, influx, aws-privateca-issuer, ratify, swagger,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: rancher-loglevel, traefik, kube-logging-operator, nerdctl, ctop, ferretdb, vertical-pod-autoscaler, http-echo, fixuid, osv-scanner, sbomqs, custom-pod-autoscaler, kuberlr, aws-sigv4-proxy, kserve-modelmesh-serving, descheduler, k3d, octo-sts,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: rancher-loglevel, traefik, kube-logging-operator, nerdctl, ctop, ferretdb, vertical-pod-autoscaler, http-echo, fixuid, osv-scanner, sbomqs, custom-pod-autoscaler, kuberlr, aws-sigv4-proxy, kserve-modelmesh-serving, descheduler, k3d, octo-sts,...

CLEANSTART-2026-YC48827 Within HostnameError

Multiple security vulnerabilities affect the cert-manager-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-HV28992 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3. See references for individual vulnerability details...

CLEANSTART-2026-DP30290 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the cert-manager-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

CLEANSTART-2026-OH86281 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-LL43287 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-EJ58111 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-QW16951 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-TR11635 Cancelling a query (e

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Cancelling a query e. See references for individual vulnerability details...

CLEANSTART-2026-GC16599 Cancelling a query (e

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Cancelling a query e. See references for individual vulnerability details...

CLEANSTART-2026-XD92996 Cancelling a query (e

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Cancelling a query e. See references for individual vulnerability details...

CLEANSTART-2026-OK45738 Within HostnameError

Security vulnerability affects the cert-manager package. Within HostnameError...

AZL-75425 CVE-2025-11065 affecting package cert-manager for versions less than 1.11.2-27

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75389 CVE-2025-11065 affecting package cert-manager 1.12.15-4

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...