GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux-fips, kuma, cilium-cli, cert-manager-cmctl-fips, zarf-fips, zarf, flux, cert-manager-cmctl, helm-diff, helm-diff-fips, gitlab-operator, kots, flux-source-controller-fips, helm-push, flux-source-controller, rancher-fleet-fips, gitlab-operator-fips, rancher-fleet...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: gitness, ocm-kubernetes-controller-fips, helm-mapkubeapis, eksctl, kgateway-fips, oras-fips, helm-push, envoy-gateway-fips, kubescape-operator, helm-exporter-fips, conftest, consul-k8s, falcoctl, helm-operator-fips, jfrog-cli, trivy-fips, kube-mgmt-fips, argo-cd-fips...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: pluto, k9s, cluster-api-helm-controller, rancher-helm, flux-source-controller, helm-operator, tw, zot, flux, flux-helm-controller, kots, chartmuseum, cert-manager-cmctl, helm-push, cilium-cli, helm-docs, kubescape, eksctl, k8ssandra-client, zarf, trivy, chart-testing...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: terragrunt, kwok, terraform-docs, k8sgpt-operator, terraform-provider-google, sigstore-scaffolding, grafana-mimir, k8sgpt, ksops, kubernetes-csi-driver-hostpath, osv-scanner, kaniko, zot, smarter-device-manager, hubble-ui, opentelemetry-collector, conftest, kots, gua...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, helm-push, kuma, flux, kots, cilium-cli, zarf, rancher-fleet, flux-source-controller...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, helm-push, kuma, flux, kots, cilium-cli, zarf, rancher-fleet, flux-source-controller...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: pluto, k9s, cluster-api-helm-controller, rancher-helm, rancher-fleet, flux-source-controller, k8sgpt, helm-operator, istio, linkerd2, tw, zot, flux-helm-controller, kots, envoy-gateway, cerbos, chartmuseum, cert-manager-cmctl, helm-push, cilium-cli, helm-docs, kargo,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, kubernetes-csi-node-driver-registrar, terragrunt, verticadb-operator, terraform-provider-azapi, atlantis, cadvisor, cri-tools, crossplane-provider-aws-sns, dkron, knative-client, yunikorn-k8shim, flux-source-controller, k8sgpt,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kustomize, kubernetes-csi-node-driver-registrar, clickhouse-operator, sealed-secrets, postgres-operator, pgpool2exporter, verticadb-operator, aws-signer-notation-plugin, nats-top, s5cmd, cri-tools, dkron, crossplane-provider-aws-sns,...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

cmctl-2.5.0-1.1 on GA media (moderate)

cmctl-2.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10672-1 Rating: moderate Cross-References: CVE-2026-32952 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the cmctl-2.5.0-1.1...

OPENSUSE-SU-2026:10672-1 cmctl-2.5.0-1.1 on GA media

These are all security issues fixed in the cmctl-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, pluto, terraform-provider-random, aws-signer-notation-plugin, nats-top, cadvisor, cri-tools, newrelic-nri-statsd, yunikorn-k8shim, flux-source-controller, rancher-system-upgrade-controller, kubernetes-csi-driver-hostpath, mattermost,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, pluto, terraform-provider-random, aws-signer-notation-plugin, nats-top, cadvisor, cri-tools, newrelic-nri-statsd, yunikorn-k8shim, flux-source-controller, rancher-system-upgrade-controller, mattermost, opentofu, nri-mysql, speedtest-go,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: k9s, terragrunt, atlantis, crossplane-provider-aws-sns, flux-source-controller, hydra, opentofu, zot, q, gitness, src-fingerprint, helm, datadog-agent, docker-cli-buildx, crossplane-provider-family-aws, crossplane-provider-aws-memorydb,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: k9s, terragrunt, atlantis, crossplane-provider-aws-sns, flux-source-controller, hydra, opentofu, zot, q, gitness, src-fingerprint, helm, datadog-agent, docker-cli-buildx, crossplane-provider-family-aws, crossplane-provider-aws-memorydb,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, gitness, crossplane-provider-aws-rds-fips, crossplane-provider-aws-lambda, cluster-api, flux-image-automation-controller-fips, vault-fips, grype-fips, helm-push, melange, hydra-fips, grafana, gitlab-rails-ce, docker-fips,...

OPENSUSE-SU-2026:10249-1 cmctl-2.4.1-1.1 on GA media

These are all security issues fixed in the cmctl-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-google-cas-issuer-fips, opentelemetry-operator, cert-manager-webhook-pdns, cert-manager-istio-csr-fips, cert-manager-csi-driver-fips, gitlab-operator-fips, cert-manager-google-cas-issuer, aws-privateca-issuer, opentelemetry-operator-fips,...