GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: k9s-fips, cert-manager-cmctl-fips, kube-arangodb, ocm-kubernetes-controller-fips, tigera-operator-fips, ocm-cli, trivy-operator-fips, helm-exporter, rancher-agent, drone, kgateway, headlamp-fips, cloudbeat, kube-mgmt, kyverno-notation-aws, kargo, argocd-image-updater...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: k9s-fips, cert-manager-cmctl-fips, kube-arangodb, ocm-kubernetes-controller-fips, tigera-operator-fips, ocm-cli, trivy-operator-fips, helm-exporter, rancher-agent, drone, kgateway, headlamp-fips, cloudbeat, kube-mgmt, kyverno-notation-aws, kargo, argocd-image-updater...

CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: k9s-fips, cert-manager-cmctl-fips, kube-arangodb, ocm-kubernetes-controller-fips, tigera-operator-fips, ocm-cli, trivy-operator-fips, helm-exporter, rancher-agent, drone, kgateway, headlamp-fips, cloudbeat, kube-mgmt, kyverno-notation-aws, kargo, argocd-image-updater...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: k9s-fips, cert-manager-cmctl-fips, kube-arangodb, ocm-kubernetes-controller-fips, tigera-operator-fips, ocm-cli, trivy-operator-fips, helm-exporter, rancher-agent, drone, kgateway, headlamp-fips, cloudbeat, kube-mgmt, kyverno-notation-aws, kargo, argocd-image-updater...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: k9s-fips, cert-manager-cmctl-fips, kube-arangodb, ocm-kubernetes-controller-fips, tigera-operator-fips, ocm-cli, trivy-operator-fips, helm-exporter, rancher-agent, drone, kgateway, headlamp-fips, cloudbeat, kube-mgmt, kyverno-notation-aws, kargo, argocd-image-updater...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: k9s-fips, cert-manager-cmctl-fips, kube-arangodb, ocm-kubernetes-controller-fips, tigera-operator-fips, ocm-cli, trivy-operator-fips, helm-exporter, rancher-agent, drone, kgateway, headlamp-fips, cloudbeat, kube-mgmt, kyverno-notation-aws, kargo, argocd-image-updater...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: k9s-fips, cilium-fips, percona-xtradb-cluster-operator, terraform-provider-kubernetes, trident-fips, argo-workflows, kube-arangodb, gitlab-runner-fips, tigera-operator-fips, kubevela-fips, trivy-operator-fips, skaffold-fips, kiali, longhorn-cli,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: k9s-fips, flux-source-watcher, omni-fips, prometheus-podman-exporter-fips, kubevela-fips, image-factory, trivy-operator-fips, buildah-fips, cloudbeat, step-ca, azure-aad-pod-identity-mic, dask-gateway, redpanda, commercial-expanso-edge, pulumi-language-java,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: k9s-fips, flux-source-watcher, omni-fips, prometheus-podman-exporter-fips, kubevela-fips, image-factory, trivy-operator-fips, buildah-fips, cloudbeat, step-ca, azure-aad-pod-identity-mic, dask-gateway, redpanda, commercial-expanso-edge, pulumi-language-java,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: k9s-fips, grafana-mimir, kyverno-policy-reporter-fips, omni-fips, prometheus-podman-exporter-fips, prometheus-process-exporter-fips, jobset-fips, blob-csi-fips, crossplane-provider-aws-ecr-fips, crossplane-provider-gitlab, image-factory, kubevela-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: k9s-fips, grafana-mimir, kyverno-policy-reporter-fips, prometheus-nats-exporter, flux-source-watcher, omni-fips, minio-operator-fips, pgtimetable, prometheus-podman-exporter-fips, jobset-fips, prometheus-process-exporter-fips, blob-csi-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: minify, grafana-mimir, flux-source-watcher, crossplane-provider-gitlab, kubernetes-release, kubevela-fips, metacontroller, trivy-operator-fips, mountpoint-s3-csi-driver, rabbitmq-default-user-credential-updater-fips, newrelic-nri-statsd,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: k9s-fips, grafana-mimir, kyverno-policy-reporter-fips, prometheus-nats-exporter, flux-source-watcher, omni-fips, minio-operator-fips, pgtimetable, prometheus-podman-exporter-fips, jobset-fips, prometheus-process-exporter-fips, blob-csi-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: k9s-fips, grafana-mimir, kyverno-policy-reporter-fips, prometheus-nats-exporter, flux-source-watcher, omni-fips, minio-operator-fips, pgtimetable, prometheus-podman-exporter-fips, jobset-fips, prometheus-process-exporter-fips, blob-csi-fips,...

CLEANSTART-2026-BT39952 Moby is an open source container framework developed by Docker Inc

Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...

CLEANSTART-2026-BQ46815 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-ME47927 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

CLEANSTART-2026-PA85871 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...