CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: steampipe, ocm-cli-fips, cert-manager-cmctl, ocm-cli, ratify-fips, helm, rancher-fleet-fips, falcoctl-fips, gitlab-operator, helm-operator-fips, chaos-mesh, eksctl, kyverno-notation-aws-fips, vcluster, kubescape, argo-cd, harvester-fips, kubescape-server-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, cass-operator, terraform-provider-acme, crossplane-provider-terraform-fips, azuredisk-csi-fips, crossplane-provider-aws-redshiftserverless, crossplane-provider-aws-rds-fips, kcp, neuvector-scanner-fips, crossplane-provider-azure-sql, cadence,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: tekton-chains, juicefs, grafana-pyroscope, weaviate, ksops, terraform-provider-pagerduty, grafana-agent-operator, migrate, external-secrets-operator, grafana, tetragon, consul-k8s, ratify, thanos, opentelemetry-collector-contrib, kubescape, splunk-otel-collector,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: tekton-chains, juicefs, grafana-pyroscope, weaviate, ksops, terraform-provider-pagerduty, grafana-agent-operator, migrate, external-secrets-operator, grafana, tetragon, consul-k8s, ratify, thanos, opentelemetry-collector-contrib, kubescape, splunk-otel-collector,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, emissary, kubevela, docker-cli-buildx, verticadb-operator, rancher-agent, kpt, helm, argo-rollouts, k9s, k8sgpt, argo-workflows, gitlab-kas, gitlab-runner, juicefs-csi-driver, aws-node-termination-handler, kargo, k3s, k8sgpt-operator, kwok,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, cert-manager-cmctl, helm, harbor, helm-push, k9s, flux-source-controller, k8sgpt, pluto, zot, flux, headlamp, eksctl, linkerd2, tw, nova, cilium-cli, cluster-api-helm-controller, consul-k8s, rancher-fleet, kuma, kubescape, zarf, helm-set-status,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...