CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: drone, k8sgpt, ocm-cli, kgateway-fips, k8ssandra-client, teleport, trivy-operator-fips, falcoctl, tw, kubescape-operator, kyverno-notation-aws-fips, tigera-operator, harvester, kube-arangodb, steampipe, trivy-operator, oras, trivy, helm-operator-fips, cloudbeat,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, crossplane-provider-aws-imagebuilder, external-secrets-operator, kubevirt-cdi-uploadserver, gomplate-fips, k8ssandra-client, argo-rollouts, azuredisk-csi, db-operator, kubo-fips,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: external-secrets-operator, promxy, hubble, grafana-agent-operator, slsa-verifier, amazon-cloudwatch-agent, trufflehog, argo-cd, kubescape-operator, wal-g, cortex, consul-k8s, cilium, weaviate, splunk-otel-collector, tetragon, ratify, tekton-chains, teleport, kubescap...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, promxy, hubble, grafana-agent-operator, slsa-verifier, amazon-cloudwatch-agent, trufflehog, argo-cd, kubescape-operator, wal-g, cortex, consul-k8s, cilium, weaviate, splunk-otel-collector, tetragon, ratify, tekton-chains, teleport, kubescap...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: k8sgpt, percona-server-mongodb-operator, hubble, headlamp, docker-cli-buildx, rancher-fleet, gitlab-runner, argo-cd, kube-arangodb, argocd-image-updater, cluster-api, aws-node-termination-handler, k3s, emissary, falcoctl, consul-k8s, cilium, postgres-operator, k9s,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux, headlamp, rancher-fleet, helm-push, helm-operator, cerbos, cluster-api-helm-controller, kube-arangodb, helm-set-status, consul-k8s, chart-testing, k9s, pluto, teleport, zarf, kubescape, istio, flux-source-controller, envoy-gateway, helm-docs, trivy-operator, tw...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...