GO-2026-5566 vulnerabilities

Vulnerabilities for packages: zarf-fips, kots, kuma, flux, cilium-cli, zarf, cert-manager-cmctl-fips, helm-push, rancher-fleet, flux-source-controller, rancher-fleet-fips, flux-source-controller-fips, flux-fips, cert-manager-cmctl, gitlab-operator, gitlab-operator-fips, helm-diff, helm-diff-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, k8ssandra-client-fips, gitlab-operator, rancher-helm, kgateway, kube-arangodb, tw, kube-mgmt, xeol, cluster-api-helm-controller, helm-push, argocd-image-updater, headlamp-fips, k8ssandra-client, opentofu, rancher-fleet-fips, chartmuseum, ocm-cli...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: sops, terraform-provider-google, guac, dbmate, spegel, dex, grafana-mimir, k8sgpt-operator, pulumi-language-dotnet, fulcio, step-ca, cilium-cli, ferretdb, opa, spire-server, zarf, osv-scanner, spicedb, grafana-agent-operator, smarter-device-manager, terraform-docs,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: eksctl, pluto, flux, helm-operator, cilium-cli, zarf, kubescape, flux-helm-controller, zot, rancher-helm, flux-source-controller, tw, cert-manager-cmctl, cluster-api-helm-controller, chart-testing, helm-docs, trivy, k8ssandra-client, k9s, chartmuseum, kots, helm-push...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux-source-controller, zarf, cert-manager-cmctl, kuma, rancher-fleet, flux, cilium-cli, kots, helm-push...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: flux-source-controller, zarf, cert-manager-cmctl, kuma, rancher-fleet, flux, cilium-cli, kots, helm-push...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cerbos, eksctl, pluto, helm-operator, cilium-cli, zarf, rancher-fleet, istio, flux-helm-controller, zot, rancher-helm, flux-source-controller, linkerd2, cert-manager-cmctl, tw, cluster-api-helm-controller, chart-testing, helm-docs, helm-push, trivy, k8ssandra-client,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, containerd, terraform-provider-sendgrid, argo-events, coredns, crossplane-provider-aws-sns, kapp-controller, snyk-cli, secrets-store-csi-driver, mariadb-operator, gatekeeper, terraform-provider-azuread, gcp-compute-persistent-disk-csi-driver,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, aws-signer-notation-plugin, guac, newrelic-infra-operator, postgres-operator, cloud-provider-aws, crossplane-provider-aws-sns, go-licenses, gptscript, kapp-controller, manifest-tool, ferretdb, gitleaks, secrets-store-csi-driver,...

CLEANSTART-2026-JL48383 Security fixes in cert-manager-cmctl-fips 2.5.0-r1

Package cert-manager-cmctl-fips version 2.5.0-r1 fixes 7 vulnerabilities: ghsa-jxpm-75mh-9fp7, ghsa-8xwf-rjm4-xvhv, ghsa-xf85-363p-868w, ghsa-vh4v-2xq2-g5cg, CVE-2026-50151...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

cmctl-2.5.0-1.1 on GA media (moderate)

cmctl-2.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10672-1 Rating: moderate Cross-References: CVE-2026-32952 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the cmctl-2.5.0-1.1...

OPENSUSE-SU-2026:10672-1 cmctl-2.5.0-1.1 on GA media

These are all security issues fixed in the cmctl-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, gcsfuse, argo-events, snyk-cli, mariadb-operator, sftpgo-plugin-pubsub, nova, kubeflow-katib, external-dns, opencost, golangci-lint, portieris, net-kourier, harbor, aws-privateca-issuer, volume-modifier-for-k8s, cert-exporter, configmap-reload,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, gcsfuse, argo-events, snyk-cli, mariadb-operator, sftpgo-plugin-pubsub, nova, external-dns, opencost, golangci-lint, portieris, net-kourier, harbor, aws-privateca-issuer, volume-modifier-for-k8s, cert-exporter, configmap-reload,...

CLEANSTART-2026-OL32822 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, ghsa-gx3x-vq4p-mhhv applied in versions: 2.4.0-r1, 2.4.0-r2

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, guac, argo-events, crossplane-provider-aws-sns, gptscript, snyk-cli, terraform-provider-azuread, crossplane-provider-family-aws, flux-helm-controller, crossplane-provider-aws-route53, hydra, syft, pulumi, vcluster, k9s, src-fingerprint,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, guac, argo-events, crossplane-provider-aws-sns, gptscript, snyk-cli, terraform-provider-azuread, crossplane-provider-family-aws, flux-helm-controller, crossplane-provider-aws-route53, hydra, syft, pulumi, vcluster, k9s, src-fingerprint,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, grype-fips, gitaly-fips, melange, gitlab-rails-ce, trufflehog-fips, ksops, flux-kustomize-controller-fips, cerbos, crossplane-provider-keycloak, gitlab-operator, flux-image-automation-controller, crossplane-provider-aws-ec2,...