PT-2026-6430

Impact The cert-manager-controller performs DNS lookups during ACME DNS-01 processing for zone discovery and propagation self-checks. By default, these lookups use standard unencrypted DNS. An attacker who can intercept and modify DNS traffic from the cert-manager-controller pod can insert a...

PT-2026-6308

Name of the Vulnerable Software and Affected Versions cert-manager versions 1.18.0 through 1.18.4 cert-manager versions 1.19.0 through 1.19.2 Description cert-manager simplifies the process of obtaining, renewing, and using certificates in Kubernetes clusters. The cert-manager-controller performs...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, skaffold-fips, cloudbeat, goreleaser, runc, datadog-agent-fips, logstash, google-osconfig-agent, minio, prometheus-elasticsearch-exporter, prometheus-mongodb-exporter, dask-gateway, flux-fips, contour-fips, mattermost, kube-conformance,...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: vale, eksctl, k3s, aactl, dask-gateway, bom, external-dns, croc, steampipe, goreleaser, headlamp, kubernetes-dashboard, ferretdb, fuse-overlayfs-snapshotter, thanos-operator, redka, timoni, src, cilium-cli, kubernetes-dashboard-api, helm-operator,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: vale, eksctl, k3s, aactl, dask-gateway, bom, external-dns, croc, steampipe, goreleaser, headlamp, kubernetes-dashboard, ferretdb, fuse-overlayfs-snapshotter, thanos-operator, redka, timoni, src, cilium-cli, kubernetes-dashboard-api, helm-operator,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, grpcurl, eksctl, harbor-registry, gogatekeeper, dask-gateway, frp, kuberlr, crossplane-provider-aws-firehose, kubernetes-dashboard-metrics-scraper, grafana-operator, spire-controller-manager, docker-credential-gcr, kyverno-policy-reporter-kyverno-plugin...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, dask-gateway, kuberlr, spire-controller-manager, helm-docs, cloud-provider-vsphere, cfssl, yace, crossplane-provider-aws-lambda, timescaledb-parallel-copy, rancher-telemetry, kubernetes-dns-node-cache, cluster-api-gcp-controller, docker,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, dask-gateway, kuberlr, spire-controller-manager, helm-docs, cloud-provider-vsphere, cfssl, yace, crossplane-provider-aws-lambda, timescaledb-parallel-copy, rancher-telemetry, kubernetes-dns-node-cache, cluster-api-gcp-controller,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, dask-gateway, kuberlr, spire-controller-manager, helm-docs, cloud-provider-vsphere, cfssl, yace, crossplane-provider-aws-lambda, timescaledb-parallel-copy, rancher-telemetry, kubernetes-dns-node-cache, cluster-api-gcp-controller,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: ipfs-cluster, grpcurl, eksctl, harbor-registry, gogatekeeper, nri-mongodb, dask-gateway, frp, kuberlr, crossplane-provider-aws-firehose, kubernetes-dashboard-metrics-scraper, grafana-operator, spire-controller-manager, docker-credential-gcr,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: grpcurl, harbor-registry, dask-gateway, kuberlr, spire-controller-manager, helm-docs, cloud-provider-vsphere, cfssl, yace, crossplane-provider-aws-lambda, timescaledb-parallel-copy, rancher-telemetry, kubernetes-dns-node-cache, cluster-api-gcp-controller, docker,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, grpcurl, eksctl, harbor-registry, gogatekeeper, dask-gateway, frp, kuberlr, crossplane-provider-aws-firehose, kubernetes-dashboard-metrics-scraper, grafana-operator, spire-controller-manager, docker-credential-gcr, kyverno-policy-reporter-kyverno-plugin...

CERT Polska Details Coordinated Cyber Attacks on 30+ Wind and Solar Farms

CERT Polska, the Polish computer emergency response team, revealed that coordinated cyber attacks targeted more than 30 wind and photovoltaic farms, a private company from the manufacturing sector, and a large combined heat and power plant CHP supplying heat to almost half a million customers in...

CLEANSTART-2026-YC48827 Within HostnameError

Multiple security vulnerabilities affect the cert-manager-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-HV28992 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3. See references for individual vulnerability details...

CLEANSTART-2026-DP30290 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the cert-manager-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

CLEANSTART-2026-OH86281 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-LL43287 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-EJ58111 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-QW16951 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...