AZL-87399 CVE-2026-39830 affecting package cert-manager for versions less than 1.12.15-9

A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close, resulting in a resource leak per connection. Unsolicited global responses are now discarded...

AZL-87411 CVE-2026-39827 affecting package cert-manager for versions less than 1.12.15-9

An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for...

CLEANSTART-2026-BN28456 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-34986, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3 applied in versions: 1.19.4-r0, 1.19.4-r1, 1.19.4-r2

Multiple security vulnerabilities affect the cert-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-35469 affecting package cert-manager for versions less than 1.12.15-7

CVE-2026-35469 affecting package cert-manager for versions less than 1.12.15-7. A patched version of the package is available...

CLEANSTART-2026-EI06494 Security fixes for CVE-2025-4673, CVE-2025-47907, CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-6vp2-p543-phr9, ghsa-9h8m-3fm2-qjrq, ghsa-cxp5-9wg8-vx66, ghsa-hcp3-c754-cr77, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-vugc-356p-c3xw applied in versions: 3.2.3-r0, 3.2.3-r1, 3.2.3-r2

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

AZL-86433 CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

GHSA-FGW5-HP8F-XFHC vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-istio-csr-fips, istio...

CVE-2026-41413 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-istio-csr-fips, istio...

CVE-2026-41413 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

GHSA-FGW5-HP8F-XFHC vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: knative-net-istio-fips, crossplane-provider-aws-memorydb-fips, crossplane-provider-azure-managedidentity, cephcsi, crossplane-provider-aws-sqs-fips, crossplane-provider-azure-resources, flux-helm-controller, net-kourier, crossplane-provider-family-azure,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: frp, external-secrets-operator, kyverno, dex, xeol, bento, grafana, zot, k6, juicefs, openbao, nuclei, cert-manager-csi-driver, rancher-webhook, kyverno-notation-aws, flux, teleport, trufflehog, percona-server-mongodb-operator, cert-manager, rancher,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver-fips, rancher-webhook-fips, ratify-fips, seaweedfs-rocksdb-fips, yunikorn-k8shim-fips, minio-fips, agentbeat, versitygw, rclone, grafana-fips, rancher-webhook, ratify, ldap2pg, sftpgo-plugin-auth, harbor, packer, cert-manager-cmctl, dex,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver-fips, rancher-webhook-fips, ratify-fips, seaweedfs-rocksdb-fips, yunikorn-k8shim-fips, minio-fips, agentbeat, versitygw, rclone, grafana-fips, rancher-webhook, ratify, ldap2pg, sftpgo-plugin-auth, harbor, packer, cert-manager-cmctl, dex,...

CVE-2026-39350 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-istio-csr-fips...

GHSA-9GCG-W975-3RJH vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-istio-csr-fips...

GHSA-9GCG-W975-3RJH vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

CVE-2026-39350 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

AZL-85625 CVE-2026-35469 affecting package cert-manager for versions less than 1.12.15-9

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count ...