AZL-75425 CVE-2025-11065 affecting package cert-manager for versions less than 1.11.2-27

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1

cert-manager Operator for Red Hat OpenShift 1.18.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Azure Linux 3.0 Security Update: cert-manager (CVE-2023-6337)

The version of cert-manager installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6337 advisory. - HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer, aws-privateca-issuer, cert-exporter...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer, aws-privateca-issuer, cert-exporter...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, cert-manager-webhook-pdns, aws-privateca-issuer-fips, cert-manager-istio-csr, cert-exporter-fips, cert-manager-webhook-pdns-fips, cert-exporter, aws-privateca-issuer, step-issuer, step-issuer-fips, cert-manager-cmctl...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: cert-manager-fips, gitlab-rails-ce-fips, etcd-fips, gitlab-rails-ce, rke2-runtime-fips, vault, consul-k8s, etcd, falco-no-driver, backup-restore-operator, k3s, terraform...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: cert-manager-fips, gitlab-rails-ce-fips, etcd-fips, gitlab-rails-ce, rke2-runtime-fips, vault, consul-k8s, etcd, falco-no-driver, backup-restore-operator, k3s, terraform...

CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25

CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25. A patched version of the package is available...

AZL-71557 CVE-2025-65637 affecting package cert-manager for versions less than 1.11.2-25

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: buildkitd, pvc-autoresizer, gops, shfmt, aws-signer-notation-plugin, prometheus-pushgateway, dive, kube-vip-cloud-provider, rancher-helm, sealed-secrets, secrets-store-csi-driver-provider-aws, otel-cli, redka, apisix-ingress-controller, wuzz, opentofu,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, pvc-autoresizer, wait-for-port, crossplane, render-template, docker-credential-gcr, kafka-proxy, gops, regclient, iptables-wrappers, kubevela, renovate, docker-machine-driver-harvester, shfmt, kubernetes-csi-external-attacher,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, pvc-autoresizer, wait-for-port, crossplane, render-template, docker-credential-gcr, kafka-proxy, gops, regclient, iptables-wrappers, kubevela, renovate, docker-machine-driver-harvester, shfmt, kubernetes-csi-external-attacher,...