CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: kyverno, kube-mgmt, consul-k8s-fips, envoy-gateway-fips, kargo, kyverno-notation-aws, crossplane-fips, ocm-cli, kyverno-fips, drone, conftest-fips, k9s-fips, eksctl, k9s, kube-arangodb-fips, helm-exporter-fips, argo-cd, kubescape-operator, k8ssandra-client-fips, kots...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane-provider-aws-s3, telegraf, grype-db, tekton-chains, envoy-gateway-fips, kong-ingress-controller, crossplane-provider-family-aws, kargo, kyverno-notation-aws, crossplane-provider-keycloak, crossplane-fips, crossplane-provider-azure-securityinsights...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: juicefs, trufflehog, wal-g, tekton-chains, splunk-otel-collector, opentelemetry-collector-contrib, cilium, amazon-cloudwatch-agent, promxy, ksops, hubble, grafana-agent-operator, thanos, grafana, dapr, kubescape-operator, grafana-mimir, cortex, kubeflow-pipelines,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: juicefs, trufflehog, wal-g, tekton-chains, splunk-otel-collector, opentelemetry-collector-contrib, cilium, amazon-cloudwatch-agent, promxy, ksops, hubble, grafana-agent-operator, thanos, grafana, dapr, kubescape-operator, grafana-mimir, cortex, kubeflow-pipelines,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: trivy, zarf, terraform-provider-kubernetes, kpt, argocd-image-updater, gitlab-kas, docker-cli-buildx, k8sgpt-operator, kiali, percona-server-mongodb-operator, kube-arangodb, envoy-gateway, velero, argo-workflows, headlamp, kubernetes, cilium, cluster-api, rancher, k3...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: trivy, zarf, helm-mapkubeapis, cluster-api-helm-controller, kube-arangodb, envoy-gateway, helm-docs, headlamp, cert-manager-cmctl, cerbos, trivy-operator, chart-testing, cilium-cli, eksctl, tw, harbor, helm-set-status, istio, consul-k8s, linkerd2, kuma,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...