GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: thanos, datadog-agent, migrate, tekton-chains, dapr, wal-g, bento, loki, cortex, promxy, kubescape-operator, terraform-provider-pagerduty, argo-cd, grafana, consul-k8s, grafana-mimir, grafana-pyroscope, weaviate, teleport, tetragon, slsa-verifier, ksops,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: thanos, datadog-agent, migrate, tekton-chains, dapr, wal-g, bento, loki, cortex, promxy, kubescape-operator, terraform-provider-pagerduty, argo-cd, grafana, consul-k8s, grafana-mimir, grafana-pyroscope, weaviate, teleport, tetragon, slsa-verifier, ksops,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kots, k8ssandra-client, cilium-cli, argo-workflows, gitlab-kas, jitsucom-bulker, kubernetes, falcoctl, datadog-agent, trivy-operator, istio, cloudnative-pg, kube-arangodb, kwok, tigera-operator, juicefs-csi-driver, skaffold, cri-tools, kubeflow-pipelines, rancher,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: zot, kots, k8ssandra-client, cilium-cli, cluster-api-helm-controller, tw, cert-manager-cmctl, helm-mapkubeapis, helm-docs, pluto, trivy-operator, istio, kube-arangodb, tigera-operator, helm-set-status, helm-push, chartmuseum, envoy-gateway, nova, flux, eksctl,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...