CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, rancher-helm, conftest, oras, crossplane-fips, cluster-api-helm-controller, envoy-gateway-fips, rancher-fleet-fips, k9s, rancher, cloudbeat-fips, redpanda-operator, ocm-kubernetes-controller, kube-arangodb-fips, helm-operator,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: falco-no-driver, external-dns, volcano-fips, kube-metrics-adapter-fips, ansible-operator, crossplane-fips, cass-operator-fips-no-pvc-delete, crossplane-provider-azure-powerbidedicated, external-dns-fips, jobset, crossplane-provider-aws-cloudwatch, envoy-gateway-fips,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: slsa-verifier, splunk-otel-collector, juicefs, cilium, dapr, bento, kubescape, grafana, datadog-agent, consul-k8s, weaviate, opentelemetry-collector-contrib, thanos, tetragon, ratify, wal-g, teleport, tekton-chains, terraform-provider-pagerduty, kubescape-operator,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: slsa-verifier, splunk-otel-collector, juicefs, cilium, dapr, bento, kubescape, grafana, datadog-agent, consul-k8s, weaviate, opentelemetry-collector-contrib, thanos, tetragon, ratify, wal-g, teleport, tekton-chains, terraform-provider-pagerduty, kubescape-operator,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: velero, emissary, aws-node-termination-handler, skaffold, cilium, k8ssandra-client, k3s, verticadb-operator, dynamic-localpv-provisioner, k8sgpt-operator, rancher-agent, kubescape, trivy-operator, cluster-api, datadog-agent, k9s, consul-k8s, envoy-gateway, kots, kpt,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: nova, flux-source-controller, helm-operator, k8ssandra-client, kubescape, cluster-api-helm-controller, trivy-operator, k9s, consul-k8s, envoy-gateway, kots, kuma, helm-mapkubeapis, helm-push, kube-arangodb, cerbos, trivy, tigera-operator, pluto, zot, chartmuseum,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...