CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: zarf-fips, xeol, rancher, ocm-cli-fips, k9s-fips, argocd-image-updater, trivy-fips, cloudbeat, kubescape-operator, gitlab-operator, manifest-tool, falcoctl, kubescape-operator-fips, rancher-helm, rancher-fleet-fips, rancher-fleet, tw, consul-k8s-fips, kots,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: packer-fips, gcp-compute-persistent-disk-csi-driver-fips, redpanda, eck-operator-fips, trident-fips, crossplane-provider-azure-signalrservice, spire-server, k8s-agents-operator-fips, temporal-server-fips, ansible-operator-fips, containerd-fips, grype-db,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: trufflehog, kubescape, ksops, tekton-chains, opentelemetry-collector-contrib, tetragon, thanos, juicefs, ratify, kubescape-operator, external-secrets-operator, grafana, hubble, datadog-agent, grafana-pyroscope, cilium, slsa-verifier, grafana-agent-operator, weaviate,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: trufflehog, kubescape, ksops, tekton-chains, opentelemetry-collector-contrib, tetragon, thanos, juicefs, ratify, kubescape-operator, external-secrets-operator, grafana, hubble, datadog-agent, grafana-pyroscope, cilium, slsa-verifier, grafana-agent-operator, weaviate,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, rancher, rancher-fleet, envoy-gateway, kubescape, tigera-operator, rancher-agent, falcoctl, verticadb-operator, kwok, cert-manager-istio-csr, k8ssandra-client, postgres-operator, hubble, datadog-agent, argo-rollouts, argo-workflows,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: rancher-fleet, envoy-gateway, kubescape, pluto, tigera-operator, flux-source-controller, helm-push, kuma, tw, cert-manager-cmctl, cluster-api-helm-controller, k8ssandra-client, cerbos, helm-set-status, k9s, kube-arangodb, linkerd2, harbor, nova, helm-operator,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...