CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

AZL-60472 CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-60528 CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in cert-manager

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of cert-manager. Vulnerability Details CVEID:CVE-2024-36537 DESCRIPTION: cert-manager could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an insecure permissions flaw. By obtaining...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tw, k8ssandra-client, helm-docs, helm-push, flux-helm-controller, flux, kots, kubescape, cilium-cli, cluster-api-helm-controller, consul-k8s, pluto, eksctl, chart-testing, zarf, k9s, cert-manager-cmctl, zot, chartmuseum, trivy, helm-operator,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: flux-source-controller, tw, k8ssandra-client, helm-docs, helm-push, flux-helm-controller, flux, kots, kubescape, cilium-cli, cluster-api-helm-controller, consul-k8s, pluto, eksctl, chart-testing, zarf, k9s, cert-manager-cmctl, zot, chartmuseum, trivy, helm-operator,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tw, k8ssandra-client, helm-docs, helm-push, flux-helm-controller, flux, kots, kubescape, cilium-cli, cluster-api-helm-controller, consul-k8s, pluto, eksctl, chart-testing, zarf, k9s, cert-manager-cmctl, zot, chartmuseum, trivy, helm-operator,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tw, k8ssandra-client, helm-docs, helm-push, flux-helm-controller, flux, kots, kubescape, cilium-cli, cluster-api-helm-controller, consul-k8s, pluto, eksctl, chart-testing, zarf, k9s, cert-manager-cmctl, zot, chartmuseum, trivy, helm-operator,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: flux-fips, tw, k8ssandra-client-fips, helm-push, flux-source-controller-fips, kuma, flux-source-controller, flux-helm-controller, helm-operator-fips, k8ssandra-client, trivy, flux-helm-controller-fips, chartmuseum, cluster-api-helm-controller-fips, trivy-fips,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux-fips, tw, k8ssandra-client-fips, helm-push, flux-source-controller-fips, kuma, flux-source-controller, flux-helm-controller, helm-operator-fips, k8ssandra-client, trivy, flux-helm-controller-fips, chartmuseum, cluster-api-helm-controller-fips, trivy-fips,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: flux-fips, tw, k8ssandra-client-fips, helm-push, flux-source-controller-fips, kuma, flux-source-controller, flux-helm-controller, helm-operator-fips, k8ssandra-client, trivy, flux-helm-controller-fips, chartmuseum, cluster-api-helm-controller-fips, trivy-fips,...

CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22

CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22. A patched version of the package is available...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, nri-nagios, sbom-convert, opentelemetry-operator, pgtimetable, grafana-mimir, sbom-scorecard, spire-server, opentelemetry-collector, kubeflow-katib, ctop, multus-cni, ini-file, rclone, golangci-lint, terraform-provider-sendgrid,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, nri-nagios, sbom-convert, opentelemetry-operator, pgtimetable, grafana-mimir, sbom-scorecard, spire-server, opentelemetry-collector, kubeflow-katib, ctop, multus-cni, ini-file, rclone, golangci-lint, terraform-provider-sendgrid,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: nri-nagios, ansible-operator, liquibase-package-manager, libnvidia-container, dockerize, traefik, golangci-lint, nodetaint, cluster-autoscaler, jitsucom-jitsu, extism, ytt, prometheus-fips, opa-fips-envoy, pdfcpu, sonobuoy, go-md2man, velero-plugin-for-csi-fips,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: nri-nagios, ansible-operator, liquibase-package-manager, libnvidia-container, dockerize, traefik, golangci-lint, nodetaint, cluster-autoscaler, jitsucom-jitsu, extism, ytt, prometheus-fips, opa-fips-envoy, pdfcpu, sonobuoy, go-md2man, velero-plugin-for-csi-fips,...

AZL-60145 CVE-2025-32386 affecting package cert-manager for versions less than 1.11.2-23

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

AZL-59979 CVE-2025-32387 affecting package cert-manager for versions less than 1.12.15-4

Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3...

AZL-59991 CVE-2025-32386 affecting package cert-manager for versions less than 1.12.15-4

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

Critical: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.14.2

cert-manager Operator for Red Hat OpenShift 1.14.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...