CVE-2025-58190 affecting package cert-manager for versions less than 1.11.2-27

CVE-2025-58190 affecting package cert-manager for versions less than 1.11.2-27. A patched version of the package is available...

CVE-2025-11065 affecting package cert-manager for versions less than 1.11.2-27

CVE-2025-11065 affecting package cert-manager for versions less than 1.11.2-27. A patched version of the package is available...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

SUSE CVE-2026-25518

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, verticadb-operator-fips, knative-net-istio-fips, terraform-provider-google, tkn, kubernetes-csi-external-provisioner-fips, cluster-api-helm-controller-fips, temporal, cluster-api-azure-controller, envoy-gateway-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: ksops, wolfictl, goreleaser, policy-controller, flux-image-automation-controller, dagger, extism, rancher-fleet, cerbos, helm-push, crossplane-provider-aws-cloudfront, hydra, tfsec, kyverno-notation-aws, flux-notification-controller, kubescape, kots, witness,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: ksops, wolfictl, goreleaser, policy-controller, flux-image-automation-controller, dagger, extism, rancher-fleet, cerbos, helm-push, crossplane-provider-aws-cloudfront, hydra, tfsec, kyverno-notation-aws, flux-notification-controller, kubescape, kots, witness,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, terraform-provider-azurerm, tekton-pipelines-fips, amazon-ssm-agent-fips, k9s, snyk-cli, pulumi-language-java, crossplane-provider-aws-memorydb-fips, crossplane-provider-azure-managedidentity, ratify-fips, crossplane-provider-aws-sns,...

GO-2026-4399 DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager

DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager...

BIT-CERT-MANAGER-2026-25518 cert-manager-controller DoS via Specially Crafted DNS Response

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

AZL-76874 CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76868 CVE-2025-47911 affecting package cert-manager for versions less than 1.12.15-6

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

CVE-2026-25518

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

CVE-2026-25518

Summary: CVE-2026-25518 affects cert-manager-controller in Kubernetes clusters. In versions 1.18.0–1.18.4 and 1.19.0–1.19.2, the controller performs DNS lookups during ACME DNS-01 processing using unencrypted DNS, allowing an attacker able to intercept DNS traffic from the cert-manager pod to ins...

CVE-2026-25518 cert-manager-controller DoS via Specially Crafted DNS Response

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

CVE-2026-25518

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

CVE-2026-25518 cert-manager-controller DoS via Specially Crafted DNS Response

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

CVE-2026-25518 cert-manager-controller DoS via Specially Crafted DNS Response

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: gitlab-operator, cert-manager-csi-driver-fips, aws-privateca-issuer, cert-manager-istio-csr, cert-manager-google-cas-issuer, opentelemetry-operator, cert-manager-webhook-pdns, mariadb-operator, cert-manager-webhook-pdns-fips, step-issuer, step-issuer-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, mariadb-operator, cert-manager-istio-csr, cert-manager-csi-driver, aws-privateca-issuer, cert-manager-webhook-pdns, step-issuer, opentelemetry-operator, percona-server-mongodb-operator...