CLEANSTART-2026-LX99611 Security fix for CVE-2021-31525 applied in: cfssl 1.5.0-r1

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100542

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101579

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100405

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100517

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101089

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101191

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it

SummaryRepo under test: https://github.com/Netflix/lemurPUT /api/1/certificates//revoke authorizes the caller against the Lemur database row creator == current user, or CertificatePermission over the row's roles rather than the underlying CA-side certificate identity. Separately, POST...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: bom, aws-application-networking-k8s, thanos-operator, docker-cli, glab, flannel, kapp, step, istio, dagdotdev, traefik, oauth2-proxy, mongo-tools, falcosidekick, boring-registry, gofumpt, kubernetes-dashboard-api, nri-kafka, ini-file, filebrowser, golangci-lint,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kine, gitness, sbomqs, aactl, pvc-autoresizer, git-lfs, conftest, postgres-operator, aws-flb-kinesis, bom, crossplane-provider-aws-iam, rancher-loglevel, kubeflow-pipelines, kserve-modelmesh-serving, kubeflow-katib, mongodb-kubernetes-operator, thanos-operator,...

GO-2024-2888 vulnerabilities

Vulnerabilities for packages: flux, gitness, aactl, bom, thanos-operator, kaniko, glab, nri-apache, terraform-provider-google, flannel, step, tkn, cert-exporter, dagdotdev, oauth2-proxy, mongo-tools, falcosidekick, kargo, boring-registry, nri-kafka, golangci-lint, dynamic-localpv-provisioner,...

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: flux, gitness, aactl, bom, aws-application-networking-k8s, thanos-operator, kaniko, glab, terraform-provider-google, flannel, kapp, step, tkn, cert-exporter, dagdotdev, oauth2-proxy, falcosidekick, kargo, boring-registry, kubernetes-dashboard-api, kiali, nri-kafka,...

CLEANSTART-2026-NG63443 Security fixes in cfssl 1.5.0-r1

Package cfssl version 1.5.0-r1 fixes 81 vulnerabilities: CVE-2020-29652, CVE-2021-31525, CVE-2021-33194, CVE-2021-38561, CVE-2021-43565...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes-fips, crossplane-provider-keycloak, cert-manager-openshift-routes-fips, flux-image-automation-controller-fips, gomplate, prometheus-beat-exporter, nsc-fips, ceph-csi-operator-fips, knative-serving, prometheus-podman-exporter,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes-fips, crossplane-provider-keycloak, cert-manager-openshift-routes-fips, flux-image-automation-controller-fips, gomplate, prometheus-beat-exporter, nsc-fips, ceph-csi-operator-fips, knative-serving, prometheus-podman-exporter,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes-fips, crossplane-provider-keycloak, cert-manager-openshift-routes-fips, flux-image-automation-controller-fips, gomplate, prometheus-beat-exporter, nsc-fips, ceph-csi-operator-fips, knative-serving, prometheus-podman-exporter,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: rancher-security-scan, knative-serving, knative-net-istio-fips, grafana-rollout-operator, oauth2-proxy-fips, amazon-vpc-cni-plugins-fips, amass, infinispan-operator, amazon-ssm-agent-fips, flux-notification-controller, kuberlr, aws-otel-collector-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: gitness, aactl, bom, thanos-operator, rancher-system-upgrade-controller, flannel, kapp, step, traefik, kubo, falcosidekick, kuma, tetragon, boring-registry, kubernetes-dashboard-api, ini-file, crossplane-provider-aws-dynamodb, golangci-lint, conjur-cli,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: kine, gitness, sbomqs, aactl, pvc-autoresizer, git-lfs, conftest, postgres-operator, aws-flb-kinesis, bom, crossplane-provider-aws-iam, rancher-loglevel, kubeflow-pipelines, kserve-modelmesh-serving, kubeflow-katib, mongodb-kubernetes-operator, thanos-operator,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: kine, gitness, sbomqs, aactl, pvc-autoresizer, git-lfs, conftest, postgres-operator, aws-flb-kinesis, bom, crossplane-provider-aws-iam, rancher-loglevel, kubeflow-pipelines, kserve-modelmesh-serving, kubeflow-katib, mongodb-kubernetes-operator, thanos-operator,...