CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: kyverno-fips, trivy, tigera-operator, harvester-fips, drone-fips, oras-fips, gitlab-operator, kyverno-notation-aws-fips, k9s-fips, headlamp, gitlab-operator-fips, gitness, drone, cluster-api-helm-controller, conftest-fips, helm-exporter-fips, helm-mapkubeapis,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-secretsmanager, trivy, crossplane-provider-aws-osis-fips, hydra-fips, crossplane-provider-aws-route53resolver, spicedb-operator, zitadel, flux-kustomize-controller, cloud-provider-azure-fips, cloud-provider-azure, gitlab-operator, scorecard,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, juicefs, argo-cd, promxy, hubble, amazon-cloudwatch-agent, trufflehog, ratify, kubeflow-pipelines, tetragon, opentelemetry-collector-contrib, cilium, kubescape-operator, bento, grafana, tekton-chains, wal-g, weaviate, ferretdb, kubescape,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, juicefs, argo-cd, promxy, hubble, amazon-cloudwatch-agent, trufflehog, ratify, kubeflow-pipelines, tetragon, opentelemetry-collector-contrib, cilium, kubescape-operator, bento, grafana, tekton-chains, wal-g, weaviate, ferretdb, kubescape,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: k9s, linkerd2, argo-cd, aws-node-termination-handler, kubernetes, kots, rancher, argocd-image-updater, k8ssandra-client, hubble, k8sgpt, rancher-agent, istio, kiali, cert-manager-istio-csr, kubernetes-dashboard-api, tigera-operator, emissary, kargo, k3s,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-mapkubeapis, k9s, linkerd2, helm-operator, tw, kots, k8ssandra-client, tigera-operator, chartmuseum, zot, helm-docs, cluster-api-helm-controller, rancher-fleet, pluto, cert-manager-cmctl, nova, helm-push, kubescape, trivy-operator, cerbos...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...