CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, kyverno-fips, helm-operator, consul-k8s, cert-manager-cmctl, chaos-mesh-fips, kubescape-server-fips, conftest, rancher-fleet-fips, steampipe, kubescape-server, rancher-agent, chaos-mesh, rancher-helm, helm-exporter, envoy-gateway, maru, vcluster-fip...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-function-auto-ready, cilium-fips, gcsfuse, promxy, ksops, flux-image-automation-controller, kubeflow-pipelines-fips, rancher-webhook-fips, tekton-pipelines, terraform-provider-databricks-fips, cert-manager-google-cas-issuer-fips, kcp-fips, gitlab-cng,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: argo-cd, grafana-pyroscope, loki, cilium, vcluster, bento, opentelemetry-collector-contrib, trufflehog, slsa-verifier, datadog-agent, thanos, grafana-mimir, prometheus, kubescape-operator, tekton-chains, kubescape, wal-g, terraform-provider-pagerduty, migrate,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: argo-cd, grafana-pyroscope, loki, cilium, vcluster, bento, opentelemetry-collector-contrib, trufflehog, slsa-verifier, datadog-agent, thanos, grafana-mimir, prometheus, kubescape-operator, tekton-chains, kubescape, wal-g, terraform-provider-pagerduty, migrate,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: cri-tools, argo-cd, gitlab-kas, cilium-cli, sonobuoy, cilium, vcluster, argo-workflows, infinispan-operator, kpt, trivy-operator, argocd-image-updater, falcoctl, gitlab-runner, emissary, headlamp, kots, datadog-agent, skaffold, argo-rollouts, kiali,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm-push, cilium-cli, cerbos, trivy-operator, helm-docs, headlamp, kots, tw, cluster-api-helm-controller, chartmuseum, flux-source-controller, cert-manager-cmctl, pluto, helm-mapkubeapis, kubescape, rancher-fleet, envoy-gateway, chart-testing, k9s, consul-k8s,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...