GO-2026-5882 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, oras-fips, kubescape-operator, kubescape-operator-fips, rancher-helm, kgateway-fips, gogatekeeper, kubescape, ocm-kubernetes-controller-fips, cloudbeat-fips, opentofu-fips, linkerd2-fips, tigera-operator, envoy-gateway, maru, gitlab-operator-fips,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: cloudbeat, helmfile, trivy, kubescape-server-fips, kots, helm-fips, rancher-fleet-fips, oras-fips, drone-fips, chartmuseum, consul-k8s-fips, gogatekeeper, opa-envoy, crossplane-fips, conftest-fips, argocd-image-updater-fips, tigera-operator-fips, argocd-image-updater...

CLEANSTART-2026-AU73245 Security fixes in consul-k8s-fips 1.8.14-r1

Package consul-k8s-fips version 1.8.14-r1 fixes 2 vulnerabilities: CVE-2026-27145, CVE-2026-33811...

CLEANSTART-2026-BJ58464 Security fixes in consul-k8s-fips 1.9.1-r0

Package consul-k8s-fips version 1.9.1-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, oras-fips, kubescape-operator, kubescape-operator-fips, rancher-helm, kgateway-fips, gogatekeeper, kubescape, ocm-kubernetes-controller-fips, cloudbeat-fips, opentofu-fips, linkerd2-fips, tigera-operator, envoy-gateway, maru, gitlab-operator-fips,...

GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, oras-fips, kubescape-operator, kubescape-operator-fips, rancher-helm, kgateway-fips, gogatekeeper, kubescape, ocm-kubernetes-controller-fips, cloudbeat-fips, opentofu-fips, linkerd2-fips, tigera-operator, envoy-gateway, maru, gitlab-operator-fips,...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, oras-fips, kubescape-operator, kubescape-operator-fips, rancher-helm, kgateway-fips, gogatekeeper, kubescape, ocm-kubernetes-controller-fips, cloudbeat-fips, opentofu-fips, linkerd2-fips, tigera-operator, envoy-gateway, maru, gitlab-operator-fips,...

CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, oras-fips, kubescape-operator, kubescape-operator-fips, rancher-helm, kgateway-fips, gogatekeeper, kubescape, ocm-kubernetes-controller-fips, cloudbeat-fips, opentofu-fips, linkerd2-fips, tigera-operator, envoy-gateway, maru, gitlab-operator-fips,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, oras-fips, kubescape-operator, kubescape-operator-fips, rancher-helm, kgateway-fips, gogatekeeper, kubescape, ocm-kubernetes-controller-fips, cloudbeat-fips, opentofu-fips, linkerd2-fips, tigera-operator, envoy-gateway, maru, gitlab-operator-fips,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, oras-fips, kubescape-operator, kubescape-operator-fips, rancher-helm, kgateway-fips, gogatekeeper, kubescape, ocm-kubernetes-controller-fips, cloudbeat-fips, opentofu-fips, linkerd2-fips, tigera-operator, envoy-gateway, maru, gitlab-operator-fips,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, commercial-grafana, longhorn-cli-fips, skaffold, kubescape, terraform-provider-kubernetes-fips, kubeflow-pipelines, cloudbeat-fips, linkerd2-fips, tigera-operator, envoy-gateway, postgres-operator-fips, gitlab-kas-fips, kwok, infinispan-operator,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: flux-operator, seaweedfs, helm-diff-fips, kubescape, rancher-machine, syft, tigera-operator, flux-helm-controller-fips, gitlab-kas-fips, newrelic-fluent-bit-output, gitlab-operator-fips, cephcsi-fips, kube-mgmt-fips, tekton-pipelines, cilium-envoy-fips, grafana-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: flux-operator, seaweedfs, helm-diff-fips, kubescape, rancher-machine, syft, tigera-operator, flux-helm-controller-fips, gitlab-kas-fips, newrelic-fluent-bit-output, gitlab-operator-fips, cephcsi-fips, kube-mgmt-fips, tekton-pipelines, cilium-envoy-fips, grafana-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: contour, yunikorn-k8shim, authservice-fips, kubescape-operator-fips, seaweedfs, loki-fips, helm-diff-fips, otel-cli, kubescape, external-dns-fips, crossplane-aws-provider, crossplane-provider-aws-ecs, rancher-machine, syft, tigera-operator, dcgm-exporter,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kubernetes-secret-generator, contour, openbao-k8s-fips, yunikorn-k8shim, authservice-fips, flux-operator, kubescape-operator-fips, seaweedfs, loki-fips, helm-diff-fips, otel-cli, kubescape, external-dns-fips, crossplane-aws-provider, crossplane-provider-aws-ecs,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubernetes-secret-generator, contour, openbao-k8s-fips, yunikorn-k8shim, authservice-fips, flux-operator, kubescape-operator-fips, seaweedfs, loki-fips, helm-diff-fips, otel-cli, kubescape, external-dns-fips, crossplane-aws-provider, crossplane-provider-aws-ecs,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubernetes-secret-generator, loki-fips, otel-cli, kubescape, cert-exporter-fips, kwok, ctop, kubeflow-fips, docker-credential-gcr, fluxcd-kustomize-mutating-webhook-fips, knative-serving-fips, certificate-transparency, hubble-ui, grpc-health-probe, cadence-fips, minc...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kubernetes-secret-generator, contour, openbao-k8s-fips, yunikorn-k8shim, authservice-fips, flux-operator, kubescape-operator-fips, seaweedfs, loki-fips, helm-diff-fips, otel-cli, kubescape, external-dns-fips, crossplane-aws-provider, crossplane-provider-aws-ecs,...

CLEANSTART-2026-BT39952 Moby is an open source container framework developed by Docker Inc

Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...

CLEANSTART-2026-BQ46815 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...