CLEANSTART-2026-LL43287 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-EJ58111 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: step-issuer, cert-manager-istio-csr, cert-manager-cmctl, cert-exporter, cert-manager-webhook-pdns, aws-privateca-issuer...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: step-issuer, cert-manager-istio-csr, cert-manager-cmctl, cert-exporter, cert-manager-webhook-pdns, aws-privateca-issuer...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer-fips, cert-manager-webhook-pdns-fips, cert-exporter, cert-manager-webhook-pdns, aws-privateca-issuer, cert-manager-cmctl, cert-manager-fips, step-issuer, cert-manager, cert-exporter-fips, cert-manager-cmctl-fips, cert-manager-istio-csr,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: undock, frp, task, govulncheck, prometheus-pushgateway, dive, regclient, external-secrets-operator, custom-pod-autoscaler, docker-credential-ecr-login, kube-state-metrics, consul-k8s, sonobuoy, sbom-convert, gcsfuse, go-licenses, mkcert, timoni, rancher-system-agent,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, rancher-loglevel, ip-masq-agent, etcd, sealed-secrets, harbor-registry, cert-manager-cmctl, boring-registry, cert-exporter, git-credential-oauth, slsa-verifier, task, govulncheck, kubernetes-csi-node-driver-registrar, crane, octo-sts,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, cert-manager-webhook-pdns-fips, mongodb-kubernetes-operator, argo-rollouts, calico, stampdalf, skopeo-fips, minio-object-browser, azure-ipam, ucd, knative-serving, distribution-fips, flyte, mc, wave, mountpoint-s3-csi-driver, terraform-docs...