CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: kots, headlamp-fips, commercial-kyverno, zarf-fips, argo-cd, kubescape-operator-fips, gitlab-operator, k8ssandra-client, cloudbeat, cluster-api-helm-controller, argocd-image-updater-fips, maru, chaos-mesh, kube-arangodb, drone-fips, harvester-fips, envoy-gateway,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-wafv2, kube-logging-operator, buildah-fips, argo-cd, cerbos, kubescape-operator-fips, argo-workflows, beats, longhorn-manager-fips, gitlab-cng-fips, crossplane-provider-kubernetes,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: trufflehog, bento, teleport, consul-k8s, migrate, kubescape, kubescape-operator, terraform-provider-pagerduty, grafana-agent-operator, external-secrets-operator, opentelemetry-collector-contrib, ratify, thanos, slsa-verifier, tekton-chains, datadog-agent, grafana,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: trufflehog, bento, teleport, consul-k8s, migrate, kubescape, kubescape-operator, terraform-provider-pagerduty, grafana-agent-operator, external-secrets-operator, opentelemetry-collector-contrib, ratify, thanos, slsa-verifier, tekton-chains, datadog-agent, grafana,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: eksctl, argo-rollouts, redis-operator, emissary, teleport, consul-k8s, kiali, velero, k8sgpt, kargo, k9s, kubescape, k3s, gitlab-kas, k8ssandra-client, skaffold, dynamic-localpv-provisioner, docker-cli-buildx, k8sgpt-operator, trivy-operator, argocd-image-updater,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: eksctl, harbor, chartmuseum, flux, consul-k8s, cerbos, k9s, kubescape, tigera-operator, tw, helm-set-status, k8ssandra-client, trivy-operator, zot, helm-mapkubeapis, kube-arangodb, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy,...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...