Security Bulletin: IBM App Connect Enterprise Certified Container operator is vulnerable to denial of service (CVE-2026-25518)

Summary Golang module cert-manager/cert-manager is used by IBM App Connect Enterprise Certified Container for interacting with the Kubernetes cluster cert-manager. IBM App Connect Enterprise Certified Container operator is vulnerable to denial of service. This bulletin provides patch information ...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, gotrue, rabbitmq-messaging-topology-operator-fips, temporal-ui-server, authentik, cert-manager-fips, grafana, argo-cd, seaweedfs-rocksdb, terragrunt-fips, grpc-health-probe-fips, tw, gitlab-cng-fips, gatus-fips, step-kms-plugin-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, gotrue, rabbitmq-messaging-topology-operator-fips, temporal-ui-server, authentik, cert-manager-fips, grafana, argo-cd, seaweedfs-rocksdb, terragrunt-fips, grpc-health-probe-fips, tw, gitlab-cng-fips, gatus-fips, step-kms-plugin-fips,...

CLEANSTART-2026-DS01292 Security fixes for CVE-2025-47910, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-24051, CVE-2026-27141, ghsa-9h8m-3fm2-qjrq applied in versions: 1.19.1-r0, 1.19.2-r0, 1.19.2-r1

Multiple security vulnerabilities affect the cert-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AL75891 Security fixes for CVE-2026-24051, ghsa-9h8m-3fm2-qjrq applied in versions: 1.19.2-r0

Multiple security vulnerabilities affect the cert-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.1

cert-manager Operator for Red Hat OpenShift 1.17.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

CVE-2025-11065 affecting package cert-manager for versions less than 1.12.15-6

CVE-2025-11065 affecting package cert-manager for versions less than 1.12.15-6. A patched version of the package is available...

CVE-2025-47911 affecting package cert-manager for versions less than 1.12.15-6

CVE-2025-47911 affecting package cert-manager for versions less than 1.12.15-6. A patched version of the package is available...

CVE-2025-58190 affecting package cert-manager for versions less than 1.11.2-27

CVE-2025-58190 affecting package cert-manager for versions less than 1.11.2-27. A patched version of the package is available...

CVE-2025-11065 affecting package cert-manager for versions less than 1.11.2-27

CVE-2025-11065 affecting package cert-manager for versions less than 1.11.2-27. A patched version of the package is available...

CVE-2025-47911 affecting package cert-manager for versions less than 1.11.2-27

CVE-2025-47911 affecting package cert-manager for versions less than 1.11.2-27. A patched version of the package is available...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

SUSE CVE-2026-25518

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, cluster-autoscaler-fips, descheduler-fips, grafana, terragrunt-fips, gitlab-cng-fips, volsync-fips, livekit-server-fips, velero, boring-registry-fips, hydra, azurefile-csi-fips, thanos, ceph-csi-operator, buildkitd, descheduler,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: dagger, terraform-provider-pagerduty, ratify, crossplane-provider-aws-ec2, kots, terraform-provider-azuread, rancher-fleet, flux-helm-controller, pulumi, crossplane-provider-aws-kms, syft, xeol, crossplane-provider-aws-eks, kyverno, crossplane-provider-aws-elasticach...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: dagger, terraform-provider-pagerduty, ratify, crossplane-provider-aws-ec2, kots, terraform-provider-azuread, rancher-fleet, flux-helm-controller, pulumi, crossplane-provider-aws-kms, syft, xeol, crossplane-provider-aws-eks, kyverno, crossplane-provider-aws-elasticach...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks-fips, trivy, trivy-fips, crossplane-provider-aws-ecr-fips, crossplane-provider-aws-firehose-fips, crossplane-provider-aws-cloudwatchlogs-fips, argocd-image-updater-fips, crossplane-provider-aws-cognitoidentity,...

GO-2026-4399 DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager

DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager...

BIT-CERT-MANAGER-2026-25518 cert-manager-controller DoS via Specially Crafted DNS Response

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...