CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: tigera-operator, xeol-fips, vcluster-fips, gatekeeper, ratify-fips, helm-exporter, tigera-operator-fips, maru, steampipe, harvester-fips, cloudbeat, ocm-kubernetes-controller-fips, kubescape-server, cluster-api-helm-controller-fips, k9s, consul-k8s, helm-mapkubeapis,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: volcano, kserve-localmodelnode-agent-fips, cluster-api-provider-vsphere, crossplane-provider-aws-imagebuilder, knative-eventing-fips, terraform-provider-grafana, blob-csi-fips, kube-logging-operator, ratify-fips, percona-xtradb-cluster-operator, grafana,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: argo-cd, cilium, ferretdb, wal-g, thanos, kubeflow-pipelines, tekton-chains, ksops, bento, amazon-cloudwatch-agent, trufflehog, splunk-otel-collector, vcluster, juicefs, hubble, slsa-verifier, promxy, grafana-mimir, tetragon, external-secrets-operator, consul-k8s,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: argo-cd, cilium, ferretdb, wal-g, thanos, kubeflow-pipelines, tekton-chains, ksops, bento, amazon-cloudwatch-agent, trufflehog, splunk-otel-collector, vcluster, juicefs, hubble, slsa-verifier, promxy, grafana-mimir, tetragon, external-secrets-operator, consul-k8s,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, argo-cd, argocd-image-updater, cilium, headlamp, k8ssandra-client, cri-tools, argo-workflows, kubeflow-pipelines, zarf, percona-server-mongodb-operator, kwok, rancher, istio, argo-rollouts, rancher-agent, juicefs-csi-driver, trivy-operator, vcluster,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm-operator, headlamp, k8ssandra-client, helm-push, tigera-operator, nova, zarf, helm-set-status, istio, zot, cerbos, trivy-operator, helm-mapkubeapis, rancher-fleet, cert-manager-cmctl, linkerd2, k9s, kots, trivy, cilium-cli, harbor, helm-docs, consul-k8s, kuma,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...