CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: ratify-fips, helm-exporter, headlamp-fips, rancher-fleet-fips, k8sgpt, harvester-fips, linkerd2-fips, drone-fips, k8ssandra-client, helm-operator-fips, rancher-helm, kyverno, chartmuseum-fips, gatekeeper, ratify, falcoctl-fips, manifest-tool, kgateway-fips, opentofu,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudsearch, crossplane-provider-aws-networkmanager-fips, node-feature-discovery, crossplane-provider-azure-synapse, harbor-registry-fips, crossplane-provider-azure-signalrservice, spicedb-fips, crossplane-provider-aws-firehose,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, teleport, amazon-cloudwatch-agent, splunk-otel-collector, ratify, grafana-agent-operator, tekton-chains, terraform-provider-pagerduty, opentelemetry-collector-contrib, ksops, external-secrets-operator, cilium, tetragon, grafana-mimir, weaviate,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, teleport, amazon-cloudwatch-agent, splunk-otel-collector, ratify, grafana-agent-operator, tekton-chains, terraform-provider-pagerduty, opentelemetry-collector-contrib, ksops, external-secrets-operator, cilium, tetragon, grafana-mimir, weaviate,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, teleport, kwok, kargo, redis-operator, infinispan-operator, verticadb-operator, cilium-cli, kube-arangodb, cilium, headlamp, argocd-image-updater, cri-tools, postgres-operator, kubeflow-pipelines, k3s, kots, trivy, falcoctl, rancher-fleet,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-set-status, kube-arangodb, flux, cert-manager-cmctl, headlamp, harbor, kots, trivy, rancher-fleet, nova, cluster-api-helm-controller, k8ssandra-client, helm-operator, eksctl, trivy-operator, helm-mapkubeapis, helm-docs, k9s, chartmuseum, envoy-gatewa...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...