GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, vcluster-fips, helm-set-status, cluster-api-helm-controller-fips, falcoctl-fips, rancher, manifest-tool, kyverno-notation-aws-fips, k9s, falcoctl, kube-arangodb-fips, argocd-image-updater, crossplane, kgateway, cert-manager-cmctl, helm-operator,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, tigera-operator, zarf, helm-fips, gatekeeper, argocd-image-updater-fips, chartmuseum-fips, consul-k8s, jfrog-cli, cilium-cli, kubescape-server, trivy-fips, k8ssandra-client-fips, helmfile, oras, argo-cd-fips, chartmuseum, crossplane-fips,...

CLEANSTART-2026-AU73245 Security fixes in consul-k8s-fips 1.8.14-r1

Package consul-k8s-fips version 1.8.14-r1 fixes 2 vulnerabilities: CVE-2026-27145, CVE-2026-33811...

CLEANSTART-2026-BJ58464 Security fixes in consul-k8s-fips 1.9.1-r0

Package consul-k8s-fips version 1.9.1-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, vcluster-fips, helm-set-status, cluster-api-helm-controller-fips, falcoctl-fips, rancher, manifest-tool, kyverno-notation-aws-fips, k9s, falcoctl, kube-arangodb-fips, argocd-image-updater, crossplane, kgateway, cert-manager-cmctl, helm-operator,...

GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, vcluster-fips, helm-set-status, cluster-api-helm-controller-fips, falcoctl-fips, rancher, manifest-tool, kyverno-notation-aws-fips, k9s, falcoctl, kube-arangodb-fips, argocd-image-updater, crossplane, kgateway, cert-manager-cmctl, helm-operator,...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, vcluster-fips, helm-set-status, cluster-api-helm-controller-fips, falcoctl-fips, rancher, manifest-tool, kyverno-notation-aws-fips, k9s, falcoctl, kube-arangodb-fips, argocd-image-updater, crossplane, kgateway, cert-manager-cmctl, helm-operator,...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, vcluster-fips, helm-set-status, cluster-api-helm-controller-fips, falcoctl-fips, rancher, manifest-tool, kyverno-notation-aws-fips, k9s, falcoctl, kube-arangodb-fips, argocd-image-updater, crossplane, kgateway, cert-manager-cmctl, helm-operator,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, vcluster-fips, helm-set-status, cluster-api-helm-controller-fips, falcoctl-fips, rancher, manifest-tool, kyverno-notation-aws-fips, k9s, falcoctl, kube-arangodb-fips, argocd-image-updater, crossplane, kgateway, cert-manager-cmctl, helm-operator,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, vcluster-fips, helm-set-status, cluster-api-helm-controller-fips, falcoctl-fips, rancher, manifest-tool, kyverno-notation-aws-fips, k9s, falcoctl, kube-arangodb-fips, argocd-image-updater, crossplane, kgateway, cert-manager-cmctl, helm-operator,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler-fips, commercial-grafana, gitlab-kas-fips, hubble, skaffold, percona-server-mongodb-operator, datadog-agent-fips, falcoctl-fips, gpu-operator-fips, cert-manager-istio-csr, neuvector, datadog-agent, rancher, sonobuoy-fips, docker-cli-build...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: act, flux, helm-exporter-fips, flux-source-controller-fips, mattermost-fips, cloud-provider-aws, hubble, docker-cli-fips, datadog-agent, step-ca-fips, azuredisk-csi-fips, docker-cli-buildx, gosu, calico, licenseclassifier, tekton-pipelines, openbao, falcoctl,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: act, flux, helm-exporter-fips, flux-source-controller-fips, mattermost-fips, cloud-provider-aws, hubble, docker-cli-fips, datadog-agent, step-ca-fips, azuredisk-csi-fips, docker-cli-buildx, gosu, calico, licenseclassifier, tekton-pipelines, openbao, falcoctl,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, flux-source-controller-fips, nginx-kubernetes-ingress-fips, tailscale, mattermost-fips, prometheus-postgres-exporter, cloud-provider-aws,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: act, calico-fips, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fip...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: act, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: act, calico-fips, flux, helm-exporter-fips, kafka-proxy, crossplane-provider-azure-authorization, kubernetes-csi-external-resizer, nri-redis-fips, terraform-ls, flux-source-controller-fips, nginx-kubernetes-ingress-fips, k3d, nri-postgresql, tailscale, mattermost-fip...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubecolor, lazygit, datadog-agent, azuredisk-csi-fips, gosu, calico, dapr, crossplane-provider-aws-wafv2, hello-world-golang, nri-couchbase-fips, trivy-operator, kube-mgmt-fips, trivy, localstack, azure-container-networking, k8s-device-plugin, authservice-fips,...

CLEANSTART-2026-BT39952 Moby is an open source container framework developed by Docker Inc

Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...

CLEANSTART-2026-ME47927 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...