GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: art, docker-fips, eks-distro-fips, kgateway, neuvector-sigstore-interface-fips, terraform-provider-databricks, aws-iam-authenticator-fips, authentik, azurefile-csi, flux-notification-controller, argo-workflows-fips, consul-k8s, tempo, kubescape-operator-fips, dapr,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: ksops, terraform-provider-pagerduty, thanos, grafana, promxy, loki, grafana-pyroscope, grafana-agent-operator, argo-cd, kubescape-operator, hubble, ratify, cortex, cilium, splunk-otel-collector, slsa-verifier, bento, external-secrets-operator, tekton-chains,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: ksops, terraform-provider-pagerduty, thanos, grafana, promxy, loki, grafana-pyroscope, grafana-agent-operator, argo-cd, kubescape-operator, hubble, ratify, cortex, cilium, splunk-otel-collector, slsa-verifier, bento, external-secrets-operator, tekton-chains,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: verticadb-operator, docker-cli-buildx, cloudnative-pg, kubevela, headlamp, k8sgpt, aws-node-termination-handler, cert-manager-istio-csr, infinispan-operator, argo-rollouts, percona-server-mongodb-operator, rancher, velero, argocd-image-updater, istio, rancher-agent,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k9s, headlamp, helm-mapkubeapis, chartmuseum, cerbos, istio, rancher-fleet, nova, envoy-gateway, trivy, chart-testing, kuma, zot, trivy-operator, kube-arangodb, k8ssandra-client, kubescape, zarf, cilium-cli, linkerd2, consul-k8s, tigera-operator,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...