GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-set-status, maru, k9s, gitlab-operator, rancher, k8ssandra-client, vcluster, conftest, steampipe, headlamp-fips, zarf, chartmuseum, xeol-fips, vcluster-fips, cloudbeat-fips, trivy, helm-operator, falcoctl-fips, gitness, falcoctl, ocm-kubernetes-controller-fips,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: helm-diff, kyverno, opa-fips-envoy, gatekeeper, ratify, kyverno-fips, consul-k8s, oras-fips, tigera-operator, grafana-operator, headlamp, opa, drone-fips, rancher, kube-mgmt-fips, helm-fips, kube-mgmt, helm, consul-k8s-fips, kubescape-server-fips, k8ssandra-client,...

CLEANSTART-2026-AU73245 Security fixes in consul-k8s-fips 1.8.14-r1

Package consul-k8s-fips version 1.8.14-r1 fixes 2 vulnerabilities: CVE-2026-27145, CVE-2026-33811...

CLEANSTART-2026-BJ58464 Security fixes in consul-k8s-fips 1.9.1-r0

Package consul-k8s-fips version 1.9.1-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: helm-set-status, maru, k9s, gitlab-operator, rancher, k8ssandra-client, vcluster, conftest, steampipe, headlamp-fips, zarf, chartmuseum, xeol-fips, vcluster-fips, cloudbeat-fips, trivy, harvester, helm-operator, falcoctl-fips, gitness, falcoctl,...

CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: helm-set-status, maru, k9s, gitlab-operator, rancher, k8ssandra-client, vcluster, conftest, steampipe, headlamp-fips, zarf, chartmuseum, xeol-fips, vcluster-fips, cloudbeat-fips, trivy, helm-operator, falcoctl-fips, gitness, falcoctl, ocm-kubernetes-controller-fips,...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: helm-set-status, maru, k9s, gitlab-operator, rancher, k8ssandra-client, vcluster, conftest, steampipe, headlamp-fips, zarf, chartmuseum, xeol-fips, vcluster-fips, cloudbeat-fips, trivy, helm-operator, falcoctl-fips, gitness, falcoctl, ocm-kubernetes-controller-fips,...

GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: helm-set-status, maru, k9s, gitlab-operator, rancher, k8ssandra-client, vcluster, conftest, steampipe, headlamp-fips, zarf, chartmuseum, xeol-fips, vcluster-fips, cloudbeat-fips, trivy, helm-operator, falcoctl-fips, gitness, falcoctl, ocm-kubernetes-controller-fips,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: helm-set-status, maru, k9s, gitlab-operator, rancher, k8ssandra-client, vcluster, conftest, steampipe, headlamp-fips, zarf, chartmuseum, xeol-fips, vcluster-fips, cloudbeat-fips, trivy, helm-operator, falcoctl-fips, gitness, falcoctl, ocm-kubernetes-controller-fips,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: helm-set-status, maru, k9s, gitlab-operator, rancher, k8ssandra-client, vcluster, conftest, steampipe, headlamp-fips, zarf, chartmuseum, xeol-fips, vcluster-fips, cloudbeat-fips, trivy, helm-operator, falcoctl-fips, gitness, falcoctl, ocm-kubernetes-controller-fips,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, k8sgpt-operator, k9s, percona-server-mongodb-operator-fips, plugin-barman-cloud-fips, kubevela-fips, sonobuoy-fips, cert-manager-istio-csr-fips, verticadb-operator, rancher, k8ssandra-client, kwok, infinispan-operator, vcluster,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: helm-set-status, flux-source-watcher-fips, juicefs, act, gitlab-operator, prometheus-elasticsearch-exporter, kubernetes-csi-node-driver-registrar-fips, localstack, kind, cilium-envoy, amazon-ecs-agent, weaviate, prometheus-mongodb-exporter, bom, external-dns,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: helm-set-status, flux-source-watcher-fips, juicefs, act, gitlab-operator, prometheus-elasticsearch-exporter, kubernetes-csi-node-driver-registrar-fips, localstack, kind, cilium-envoy, amazon-ecs-agent, weaviate, prometheus-mongodb-exporter, bom, external-dns,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, kyverno-policy-reporter-plugins-trivy-fips, helm-set-status, authservice-fips, crossplane-function-go-templating-fips, cert-manager-istio-csr-fips, juicefs, verticadb-operator, gitlab-operator, kserve-rest-proxy,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, kyverno-policy-reporter-plugins-trivy-fips, helm-set-status, vault-k8s-fips, authservice-fips, cilium-certgen, crossplane-function-go-templating-fips, flux-source-watcher-fips, cert-manager-istio-csr-fips, influx, juicefs,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, kyverno-policy-reporter-plugins-trivy-fips, helm-set-status, vault-k8s-fips, authservice-fips, cilium-certgen, crossplane-function-go-templating-fips, flux-source-watcher-fips, cert-manager-istio-csr-fips, influx, juicefs,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, kyverno-policy-reporter-plugins-trivy-fips, helm-set-status, vault-k8s-fips, authservice-fips, cilium-certgen, crossplane-function-go-templating-fips, flux-source-watcher-fips, cert-manager-istio-csr-fips, influx, juicefs,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-trivy-fips, vault-k8s-fips, cilium-certgen, crossplane-function-go-templating-fips, verticadb-operator, k3d, prometheus-elasticsearch-exporter, delve, nri-jmx-fips, s5cmd, fleet-server, cilium-envoy, kubescape-http-request-fips,...

CLEANSTART-2026-BT39952 Moby is an open source container framework developed by Docker Inc

Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...

CLEANSTART-2026-BQ46815 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...