CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: rancher-fleet, manifest-tool, trivy-operator-fips, kots, argo-cd-fips, consul-k8s-fips, rancher-agent, helm-set-status, gatekeeper, chartmuseum, helm-exporter-fips, kubescape-server-fips, gitlab-operator-fips, tigera-operator-fips, kube-arangodb-fips, k8ssandra-clien...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, crossplane-provider-gcp-beta-container, neuvector-scanner, plugin-barman-cloud, external-secrets-operator, kubernetes-fips, consul-k8s-fips, opensearch-datasource-fips, gcsfuse,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: slsa-verifier, grafana, kubeflow-pipelines, grafana-pyroscope, argo-cd, teleport, vcluster, opentelemetry-collector-contrib, wal-g, juicefs, kubescape, cortex, trufflehog, dapr, ratify, external-secrets-operator, consul-k8s, amazon-cloudwatch-agent, kubescape-operato...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: slsa-verifier, grafana, kubeflow-pipelines, grafana-pyroscope, argo-cd, teleport, vcluster, opentelemetry-collector-contrib, wal-g, juicefs, kubescape, cortex, trufflehog, dapr, ratify, external-secrets-operator, consul-k8s, amazon-cloudwatch-agent, kubescape-operato...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, cluster-api, gitlab-runner, kots, rancher-fleet, cert-manager-istio-csr, emissary, argo-cd, teleport, eksctl, aws-node-termination-handler, rancher, terraform-provider-kubernetes, vcluster, k8sgpt, argo-rollouts, infinispan-operator,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm-push, rancher-fleet, kots, helm-operator, helm-set-status, pluto, eksctl, kuma, chart-testing, k9s, kubescape, tigera-operator, istio, flux-source-controller, cerbos, cluster-api-helm-controller, harbor, flux, cert-manager-cmctl, zot, helm-docs, consul-k8s,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...