5515 matches found
CLEANSTART-2026-ME47927 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
CLEANSTART-2026-BQ46815 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-PA85871 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
CLEANSTART-2026-IA37596 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
USN-7990-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Padata parallel execution mechanism; - Netfilter; CVE-2022-49698, CVE-2025-21726, CVE-2025-400...
CLEANSTART-2026-ER42900 ParseAddress function constructs domain-literal address components through repeated string concatenation
Multiple security vulnerabilities affect the external-dns-fips package. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...
CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-MJ51212 Cancelling a query (e
Multiple security vulnerabilities affect the dex-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-RU37859 Cancelling a query (e
Multiple security vulnerabilities affect the dex-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-DY37532 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Security vulnerability affects the cortex-fips package. Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
CLEANSTART-2026-HG66170 Cancelling a query (e
Security vulnerability affects the dex-fips package. Cancelling a query e...
CLEANSTART-2026-BZ92766 beego is an open-source web framework for the Go programming language
Multiple security vulnerabilities affect the harbor-fips package. beego is an open-source web framework for the Go programming language. See references for individual vulnerability details...
CLEANSTART-2026-NV07964 Cancelling a query (e
Multiple security vulnerabilities affect the fluent-operator-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-QK01721 go-redis is the official Redis client library for the Go programming language
Multiple security vulnerabilities affect the harbor-registry-fips package. go-redis is the official Redis client library for the Go programming language. See references for individual vulnerability details...
CLEANSTART-2026-RR90125 Cancelling a query (e
Multiple security vulnerabilities affect the fluent-operator-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-XX70537 Cancelling a query (e
Multiple security vulnerabilities affect the harbor-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-RY09679 go-redis is the official Redis client library for the Go programming language
Security vulnerability affects the harbor-registry-fips package. go-redis is the official Redis client library for the Go programming language...
CLEANSTART-2026-PO40318 go-redis is the official Redis client library for the Go programming language
Multiple security vulnerabilities affect the harbor-registry-fips package. go-redis is the official Redis client library for the Go programming language. See references for individual vulnerability details...
CLEANSTART-2026-CT39828 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...