CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: ocm-cli-fips, kube-mgmt, kubescape-operator, helm-set-status, maru, consul-k8s, tigera-operator, trivy-fips, falcoctl, rancher, chartmuseum, gitlab-operator, kgateway-fips, trivy-operator-fips, trivy, vcluster, harvester, kots, rancher-agent, drone,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, crossplane-provider-aws-cloudtrail, amazon-cloudwatch-agent-operator-fips, cerbos-fips, crossplane-provider-azure-storage, ingress-nginx-controller-fips, cert-manager-google-cas-issuer-fips, pulumi-kubernetes-operator, ucd,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: ratify, promxy, slsa-verifier, argo-cd, amazon-cloudwatch-agent, vcluster, trufflehog, kubescape-operator, juicefs, teleport, ksops, kubescape, opentelemetry-collector-contrib, datadog-agent, grafana-mimir, hubble, migrate, consul-k8s, splunk-otel-collector, ferretdb...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: ratify, promxy, slsa-verifier, argo-cd, amazon-cloudwatch-agent, vcluster, trufflehog, kubescape-operator, juicefs, teleport, ksops, kubescape, opentelemetry-collector-contrib, datadog-agent, grafana-mimir, hubble, migrate, consul-k8s, splunk-otel-collector, ferretdb...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kots, cert-manager-istio-csr, envoy-gateway, velero, trivy, argo-cd, k8sgpt-operator, gitlab-runner, k9s, cilium-cli, argo-workflows, vcluster, teleport, infinispan-operator, k8sgpt, emissary, kubescape, argocd-image-updater, terraform-provider-kubernetes,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: kots, nova, harbor, envoy-gateway, helm-push, tw, helm-docs, chart-testing, chartmuseum, cerbos, k9s, cilium-cli, helm-mapkubeapis, kubescape, zot, cert-manager-cmctl, consul-k8s, kube-arangodb, linkerd2, trivy, flux, pluto, eksctl, headlamp, kuma, rancher-fleet,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...