CVE-2026-62290 cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace...

EUVD-2026-45017

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: restic, k3s, secrets-store-csi-driver-provider-gcp, glab, aws-node-termination-handler, harbor-registry, speedtest-go, crossplane-provider-aws-rds, smokescreen, vault-k8s, k3d, src, ratify, cri-tools, cue, openbao-k8s, nri-consul, terraform-provider-azapi,...

PYSEC-2026-1602 OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack

An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the certmanager.py. component...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, k9s-fips, chisel-fips, argo-workflows-fips, kube-conformance, tekton-pipelines-fips, cilium-cli, omnictl-multiarch, loki, flux-source-controller-fips, argocd-image-updater-fips, argo-cd-fips, telegraf, opentofu-fips, terraform,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, melange, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, k3s, policy-controller, buildah, glab, crossplane-provider-aws-elasticache, trivy-operator, tw, kyverno, crossplane-provider-aws-rds, step-kms-plugin,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: melange, crossplane-provider-azure-authorization, k3s, policy-controller, buildah, glab, trivy-operator, kyverno, step-kms-plugin, datadog-agent, kargo, docker-cli-buildx, wolfictl, guac, falco-no-driver, apko, flux, kine, zot, snyk-cli, pulumi-kubernetes-operator,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: aactl, spire-server, telegraf, argocd-image-updater, external-dns, k3s, trivy-operator, kyverno, istio, prometheus, cloud-provider-aws, containerd, rancher, chisel, flux-source-controller, kaf, zarf, cert-manager, prometheus-operator, kubescape, mattermost, gitea,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, telegraf, argocd-image-updater, external-dns, k3s, docker-machine-driver-harvester, trivy-operator, kyverno, istio, prometheus, cloud-provider-aws, containerd, rancher, chisel, flux-source-controller, kaf, zarf, cert-manager, prometheus-operator,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: melange, k3s, buildah, trivy-operator, kyverno, step-kms-plugin, docker-cli-buildx, wolfictl, guac, falco-no-driver, apko, flux, kine, zot, snyk-cli, pulumi-kubernetes-operator, fscrypt, zarf, argo-cd, loki, aactl, grype, istio, prometheus, cloud-provider-aws,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: aactl, spire-server, telegraf, external-dns, k3s, buildah, kyverno, istio, prometheus, cloud-provider-aws, containerd, rancher, kaf, cert-manager, prometheus-operator, docker-cli-buildx, mattermost, opentelemetry-collector, helm, cilium-cli, podman, minio, kine,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: grafana-mimir, caddy-fips, manifest-tool, crossplane-provider-azure-spring, cert-manager-openshift-routes-fips, milvus, kgateway-fips, azure-workload-identity-webhook, kuberay-operator, kueue, amazon-cloudwatch-agent-operator-fips, ferretdb, kuberay-apiserver-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: grafana-mimir, caddy-fips, manifest-tool, crossplane-provider-azure-spring, cert-manager-openshift-routes-fips, milvus, kgateway-fips, azure-workload-identity-webhook, kuberay-operator, kueue, amazon-cloudwatch-agent-operator-fips, ferretdb, kuberay-apiserver-fips,...

CLEANSTART-2026-MO16862 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-pjcq-xvwq-hhpj applied in versions: 1.20.2-r0

Multiple security vulnerabilities affect the cert-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9. A patched version of the package is available...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, go, k3s, kubernetes-replicator, policy-controller, trino, aws-node-termination-handler, apisix-ingress-controller, crossplane-provider-aws-elasticache,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, go, k3s, kubernetes-replicator, policy-controller, trino, aws-node-termination-handler, apisix-ingress-controller, crossplane-provider-aws-elasticache,...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, go, k3s, ctop, kubernetes-replicator, policy-controller, buildah, trino, glab, aws-node-termination-handler, apisix-ingress-controller,...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, go, k3s, ctop, kubernetes-replicator, policy-controller, buildah, trino, glab, aws-node-termination-handler, apisix-ingress-controller,...

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, go, k3s, ctop, kubernetes-replicator, policy-controller, buildah, trino, glab, aws-node-termination-handler, apisix-ingress-controller,...