CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: helmfile, packer, zarf-fips, helm-push, chainctl-fips, docker-compose-fips, grype-fips, tw, envoy-gateway, spegel, docker-compose, rancher-agent, kube-arangodb, k9s, consul-k8s, headlamp, linkerd2-fips, k9s-fips, kubevela, newrelic-infrastructure-agent,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helmfile, packer, zarf-fips, helm-push, chainctl-fips, docker-compose-fips, grype-fips, tw, envoy-gateway, spegel, docker-compose, rancher-agent, kube-arangodb, k9s, consul-k8s, headlamp, linkerd2-fips, k9s-fips, kubevela, newrelic-infrastructure-agent,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: helmfile, packer, zarf-fips, helm-push, chainctl-fips, docker-compose-fips, grype-fips, tw, envoy-gateway, spegel, docker-compose, rancher-agent, kube-arangodb, k9s, consul-k8s, headlamp, linkerd2-fips, k9s-fips, kubevela, newrelic-infrastructure-agent,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, tempo-fips, crossplane-provider-aws-appflow-fips, net-kourier, gitlab-kas-fips, vexctl, crossplane-provider-azure-powerbidedicated, argo-events-fips, crossplane-provider-aws-kafka, beats, k6-fips, flux-helm-controller, ipfs-cluster...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: flux, pluto, teleport, k8ssandra-client, helm-docs, k9s, headlamp, helm-mapkubeapis, zarf, nova, trivy-operator, trivy, tigera-operator, linkerd2, kots, chartmuseum, zot, harbor, envoy-gateway, eksctl, kube-arangodb, helm-push, cerbos, cert-manager-cmctl,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux, pluto, teleport, k8ssandra-client, helm-docs, k9s, headlamp, helm-mapkubeapis, zarf, nova, trivy-operator, trivy, tigera-operator, linkerd2, kots, chartmuseum, zot, harbor, envoy-gateway, eksctl, kube-arangodb, helm-push, cerbos, cert-manager-cmctl,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, nova-fips, cert-manager-cmctl-fips, flux, helm-mapkubeapis, jfrog-cli, kuma, cilium-cli, nova, trivy-fips, pluto, cloudbeat-fips, cerbos-fips, kubescape-server, trivy, kots, zarf-fips, chaos-mesh, trivy-operator, helm-push, cloudbeat,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: jaeger, nats, net-kourier, gitlab-kas-fips, tofu-controller-fips, aws-load-balancer-controller-fips, argo-cd, gitleaks, cerbos, amazon-ecs-cni-plugins, beats, flux-helm-controller, ipfs-cluster, knative-serving-fips, aactl, rancher-machine, atlas-fips, jsonnet-bundle...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: jaeger, nats, net-kourier, gitlab-kas-fips, tofu-controller-fips, aws-load-balancer-controller-fips, argo-cd, gitleaks, cerbos, amazon-ecs-cni-plugins, beats, flux-helm-controller, ipfs-cluster, knative-serving-fips, aactl, rancher-machine, atlas-fips, jsonnet-bundle...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: jaeger, tempo-fips, net-kourier, gitlab-kas-fips, vexctl, tofu-controller-fips, dapr-fips, plugin-barman-cloud-fips, databricks-cli-fips, aws-load-balancer-controller-fips, argo-events-fips, argo-cd, kubernetes-dashboard-fips, cerbos, beats, cloud-sql-proxy, hubble-u...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: jaeger, tempo-fips, net-kourier, gitlab-kas-fips, vexctl, tofu-controller-fips, dapr-fips, plugin-barman-cloud-fips, databricks-cli-fips, aws-load-balancer-controller-fips, argo-events-fips, argo-cd, kubernetes-dashboard-fips, cerbos, beats, cloud-sql-proxy, hubble-u...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, jaeger, kubevirt-cdi-operator-fips, nats, tempo-fips, quic-go-fips, net-kourier, gitlab-kas-fips, vexctl, tofu-controller-fips, dapr-fips, plugin-barman-cloud-fips, pluto, thanos-operator-fips, databricks-cli-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: dapr-fips, thanos-operator-fips, victoriametrics-fips, gitleaks, cerbos, secretgen-controller, tw, hubble-ui, k9s-fips, crossplane-provider-aws-eks-fips, kubelet-csr-approver-fips, agentbeat-fips, gotestsum, teleport-operator-fips, terraform-provider-sendgrid,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kpt, guac, prometheus-blackbox-exporter, aws-efs-csi-driver, crossplane-provider-aws-memorydb, dbmate, grafana-agent-operator, manifest-tool, ko, knative-eventing, terraform-provider-pagerduty, kubernetes-csi-node-driver-registrar, maru, cert-manager-webhook-pdns,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kpt, guac, prometheus-blackbox-exporter, aws-efs-csi-driver, crossplane-provider-aws-memorydb, dbmate, grafana-agent-operator, manifest-tool, ko, knative-eventing, terraform-provider-pagerduty, kubernetes-csi-node-driver-registrar, maru, cert-manager-webhook-pdns,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kpt, guac, prometheus-blackbox-exporter, aws-efs-csi-driver, crossplane-provider-aws-memorydb, dbmate, grafana-agent-operator, manifest-tool, ko, knative-eventing, terraform-provider-pagerduty, kubernetes-csi-node-driver-registrar, maru, cert-manager-webhook-pdns,...

CLEANSTART-2026-CT39828 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-TS42581 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-SY95837 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kpt, guac, prometheus-blackbox-exporter, dbmate, grafana-agent-operator, cluster-api-gcp-controller, manifest-tool, ko, knative-eventing, kubernetes-csi-node-driver-registrar, maru, cert-manager-webhook-pdns, php-fpmexporter, pgpool2exporter, kube-vip-cloud-provider,...