CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: drone, opentofu-fips, helm-operator, argocd-image-updater, kube-arangodb, oras, cluster-api-helm-controller, kubescape-server, rancher-helm, trivy-operator-fips, falcoctl, drone-fips, rancher-fleet, linkerd2, linkerd2-fips, ocm-cli-fips, ocm-kubernetes-controller,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: knative-net-istio-fips, fleet-server, crossplane-provider-kubernetes-fips, ingress-nginx-controller-fips, chronograf, newrelic-infrastructure-agent-fips, boring-registry-fips, gitlab-workhorse-ce, atlas, tekton-chains-fips, ferretdb, crossplane-provider-aws-scheduler...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: juicefs, tetragon, argo-cd, kubescape-operator, tekton-chains, cortex, hubble, weaviate, opentelemetry-collector-contrib, trufflehog, teleport, datadog-agent, consul-k8s, migrate, splunk-otel-collector, dapr, terraform-provider-pagerduty, bento, ferretdb, kubescape,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: juicefs, tetragon, argo-cd, kubescape-operator, tekton-chains, cortex, hubble, weaviate, opentelemetry-collector-contrib, trufflehog, teleport, datadog-agent, consul-k8s, migrate, splunk-otel-collector, dapr, terraform-provider-pagerduty, bento, ferretdb, kubescape,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: k9s, k3s, gitlab-kas, k8sgpt, k8ssandra-client, envoy-gateway, zarf, sonobuoy, cloudnative-pg, trivy-operator, argo-cd, kubevela, argocd-image-updater, k8sgpt-operator, cluster-api, linkerd2, percona-server-mongodb-operator, kubeflow-pipelines, kubernetes,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k9s, helm-push, k8ssandra-client, envoy-gateway, nova, helm-mapkubeapis, zarf, flux-source-controller, trivy-operator, harbor, linkerd2, helm-docs, helm, zot, chartmuseum, tw, trivy, kots, helm-operator, rancher-fleet, eksctl, consul-k8s, istio, helm-set-status, plut...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...