CLEANSTART-2026-BK80447 Security fixes in cert-manager 1.20.1-r1

Package cert-manager version 1.20.1-r1 fixes 3 vulnerabilities: CVE-2026-34986, CVE-2026-39883, ghsa-78h2-9frx-2jm8...

CLEANSTART-2026-AH57761 Security fixes in cert-manager-webhook-pdns-fips 3.2.3-r2

Package cert-manager-webhook-pdns-fips version 3.2.3-r2 fixes 25 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-RV34612 Security fixes in cert-manager 1.17.4-r1

Package cert-manager version 1.17.4-r1 fixes 2 vulnerabilities: CVE-2026-39883, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-UQ56920 Security fixes in cert-manager 1.19.1-r1

Package cert-manager version 1.19.1-r1 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-QV66806 Security fixes in cert-manager-fips 1.19.1-r0

Package cert-manager-fips version 1.19.1-r0 fixes 16 vulnerabilities: CVE-2025-61729, CVE-2025-61725, CVE-2025-61723, CVE-2025-58188, CVE-2025-58187...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-RK12884 Security fixes in cert-manager 1.18.6-r2

Package cert-manager version 1.18.6-r2 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-RD47118 Security fixes in cert-manager 1.19.4-r4

Package cert-manager version 1.19.4-r4 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-EW65263 Security fixes in cert-manager 1.19.2-r0

Package cert-manager version 1.19.2-r0 fixes 3 vulnerabilities: ghsa-9h8m-3fm2-qjrq, CVE-2026-24051, CVE-2026-24051...

CLEANSTART-2026-PX32324 Security fixes in cert-manager 1.20.0-r0

Package cert-manager version 1.20.0-r0 fixes 54 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: zot, flux, telegraf, snyk-cli, cert-manager, kine, kots, terraform, cilium, prometheus-operator, reports-server, loki, backup-restore-operator, kaf, zitadel, commercial-expanso-edge, prometheus-mongodb-exporter, k3s, minio, elastic-agent-fips, containerd,...

BIT-CERT-MANAGER-2026-62290 cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kubescape, calico, flux-helm-controller, cert-manager-istio-csr, cluster-api-ipam-provider-in-cluster, kyverno, datadog-agent, fluent-operator, rancher, tekton-chains, helm-operator, telegraf, crossplane, spicedb, kubernetes-csi-external-snapshotter, kapp-controller,...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kuberay-operator, percona-server-mongodb-operator, step-issuer, cert-manager-webhook-pdns, mariadb-operator, cert-manager-istio-csr, aws-privateca-issuer, cert-manager-csi-driver...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver, cert-manager-istio-csr-fips, mariadb-operator-fips, cert-manager-cmctl, redpanda-operator, kuberay-operator, cert-manager-webhook-pdns-fips, cert-manager-webhook-pdns, cert-manager-cmctl-fips, commercial-nginx-ingress,...

AZL-93141 CVE-2026-56852 affecting package cert-manager for versions less than 1.12.15-11

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CLEANSTART-2026-TN63389 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-pjcq-xvwq-hhpj applied in versions: 1.20.2-r0

Multiple security vulnerabilities affect the cert-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NM43450 Security fixes for CVE-2026-24051, CVE-2026-29181, CVE-2026-32952, CVE-2026-33186, CVE-2026-34986, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-mpwr-8vm7-h73f, ghsa-p77j-4mvh-x3m3, ghsa-pjcq-xvwq-hhpj applied in versions: 1.19.2-r0, 1.19.2-r2

Multiple security vulnerabilities affect the cert-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HQ95461 Security fixes for CVE-2026-42504 applied in versions: 1.19.4-r4

Security vulnerability affects the cert-manager package. This issue is resolved in later releases. See references for vulnerability details...

AZL-92991 CVE-2026-63308 affecting package cert-manager for versions less than 1.12.15-11

Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in...