GO-2026-5882 vulnerabilities

Vulnerabilities for packages: conftest-fips, trivy, oras, gatekeeper, k9s, envoy-gateway, ratify-fips, consul-k8s-fips, helm-set-status, gitness, xeol-fips, kube-mgmt, manifest-tool, falcoctl-fips, rancher-helm, rancher, cluster-api-helm-controller-fips, cloudbeat, trivy-operator-fips,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: conftest-fips, trivy, kubescape-server-fips, oras, grafana-operator, drone, falcoctl, gatekeeper, argocd-image-updater, kubescape-server, conftest, helm-operator-fips, teleport, zot, helmfile, ratify-fips, consul-k8s-fips, helm-fips, kyverno-fips, jfrog-cli,...

CLEANSTART-2026-AU73245 Security fixes in consul-k8s-fips 1.8.14-r1

Package consul-k8s-fips version 1.8.14-r1 fixes 2 vulnerabilities: CVE-2026-27145, CVE-2026-33811...

CLEANSTART-2026-BJ58464 Security fixes in consul-k8s-fips 1.9.1-r0

Package consul-k8s-fips version 1.9.1-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: conftest-fips, trivy, oras, gatekeeper, k9s, envoy-gateway, ratify-fips, consul-k8s-fips, helm-set-status, gitness, xeol-fips, kube-mgmt, manifest-tool, falcoctl-fips, rancher-helm, rancher, cluster-api-helm-controller-fips, cloudbeat, trivy-operator-fips,...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: conftest-fips, trivy, oras, gatekeeper, k9s, envoy-gateway, ratify-fips, consul-k8s-fips, helm-set-status, gitness, xeol-fips, kube-mgmt, manifest-tool, falcoctl-fips, rancher-helm, rancher, cluster-api-helm-controller-fips, cloudbeat, trivy-operator-fips,...

GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: conftest-fips, trivy, oras, gatekeeper, k9s, envoy-gateway, ratify-fips, consul-k8s-fips, helm-set-status, gitness, xeol-fips, kube-mgmt, manifest-tool, falcoctl-fips, rancher-helm, rancher, cluster-api-helm-controller-fips, cloudbeat, trivy-operator-fips,...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: conftest-fips, trivy, oras, gatekeeper, k9s, harvester-fips, envoy-gateway, ratify-fips, consul-k8s-fips, helm-set-status, gitness, xeol-fips, kube-mgmt, manifest-tool, falcoctl-fips, rancher-helm, rancher, cluster-api-helm-controller-fips, cloudbeat,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: conftest-fips, trivy, oras, gatekeeper, k9s, envoy-gateway, ratify-fips, consul-k8s-fips, helm-set-status, gitness, xeol-fips, kube-mgmt, manifest-tool, falcoctl-fips, rancher-helm, rancher, cluster-api-helm-controller-fips, cloudbeat, trivy-operator-fips,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: conftest-fips, trivy, oras, gatekeeper, k9s, envoy-gateway, ratify-fips, consul-k8s-fips, helm-set-status, gitness, xeol-fips, kube-mgmt, manifest-tool, falcoctl-fips, rancher-helm, rancher, cluster-api-helm-controller-fips, cloudbeat, trivy-operator-fips,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: trivy, rancher-support-bundle-kit, argo-workflows, kiali, k9s, envoy-gateway, consul-k8s-fips, terraform-provider-kubernetes-fips, redis-operator-fips, kiali-fips, longhorn-cli-fips, aws-node-termination-handler-fips, falcoctl-fips, rancher, trivy-operator-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, envconsul, buf, commercial-chainloop-backend, mattermost-fips, kube-state-metrics, helm-diff-fips, vault-benchmark, scorecard, argo-cd, kube-conformance, chartmuseum, jsonnet-bundler, apko, gomplate, spire-server, consul, policy-controller...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, envconsul, buf, commercial-chainloop-backend, mattermost-fips, kube-state-metrics, helm-diff-fips, vault-benchmark, scorecard, argo-cd, kube-conformance, chartmuseum, jsonnet-bundler, apko, gomplate, spire-server, consul, policy-controller...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: trivy, kube-oidc-proxy, crossplane-provider-sql, terraform-provider-aws-fips, eks-node-monitoring-agent-fips, envconsul, prometheus-blackbox-exporter, crossplane-function-go-templating, commercial-chainloop-backend, mattermost-fips, kube-state-metrics,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, kube-oidc-proxy, rancher-loglevel, crossplane-provider-sql, terraform-provider-aws-fips, eks-node-monitoring-agent-fips, volcano-fips, envconsul, mongo-tools, buf, ytt-fips, prometheus-blackbox-exporter, crossplane-function-go-templating,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, kube-oidc-proxy, rancher-loglevel, crossplane-provider-sql, terraform-provider-aws-fips, eks-node-monitoring-agent-fips, volcano-fips, envconsul, mongo-tools, buf, ytt-fips, prometheus-blackbox-exporter, crossplane-function-go-templating,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: trivy, flux-source-watcher, kube-oidc-proxy, rancher-loglevel, crossplane-provider-sql, terraform-provider-aws-fips, eks-node-monitoring-agent-fips, volcano-fips, envconsul, mongo-tools, buf, ytt-fips, prometheus-blackbox-exporter, crossplane-function-go-templating,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, terraform-provider-aws-fips, envconsul, buf, crossplane-function-go-templating, wire-go, docker-credential-acr-env, openbao-k8s, cluster-api-gcp-controller-fips, kiali-fips, crossplane-provider-aws-elbv2, argo-cd, bazelisk,...

CLEANSTART-2026-BT39952 Moby is an open source container framework developed by Docker Inc

Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...

CLEANSTART-2026-BQ46815 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...