CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: vcluster, trivy-fips, helm-mapkubeapis, kgateway-fips, kube-arangodb, kyverno-notation-aws-fips, k8ssandra-client, envoy-gateway-fips, headlamp, helm-set-status, ratify-fips, k8sgpt, helm-operator, gitness, argocd-image-updater, maru, zarf-fips, cloudbeat-fips, tw,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: coder-fips, crossplane-provider-azure-servicefabric, terraform-provider-acme-fips, bank-vaults-vault-operator, crossplane-provider-aws-wafv2-fips, crossplane-provider-keycloak-fips, crossplane-provider-gcp-beta-container, kueue, volcano, grafana-mimir-fips,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: teleport, vcluster, ferretdb, argo-cd, splunk-otel-collector, external-secrets-operator, terraform-provider-pagerduty, kubeflow-pipelines, ksops, dapr, trufflehog, cortex, juicefs, grafana-agent-operator, grafana-mimir, datadog-agent, grafana, cilium,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: teleport, vcluster, ferretdb, argo-cd, splunk-otel-collector, external-secrets-operator, terraform-provider-pagerduty, kubeflow-pipelines, ksops, dapr, trufflehog, cortex, juicefs, grafana-agent-operator, grafana-mimir, datadog-agent, grafana, cilium,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: teleport, cert-manager-istio-csr, vcluster, gitlab-kas, kargo, gitlab-runner, kots, trivy, verticadb-operator, argo-cd, eksctl, tigera-operator, kubeflow-pipelines, percona-server-mongodb-operator, sonobuoy, velero, linkerd2, zarf, argo-rollouts, kiali,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: kots, trivy, eksctl, tigera-operator, chart-testing, helm-mapkubeapis, nova, zarf, linkerd2, cluster-api-helm-controller, helm-operator, k9s, k8ssandra-client, flux-source-controller, kuma, helm-docs, istio, pluto, chartmuseum, kube-arangodb, trivy-operator, harbor,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...