GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, envoy-gateway-fips, k8sgpt, crossplane, linkerd2-fips, helm-operator-fips, cluster-api-helm-controller-fips, kubevela-fips, envoy-gateway, cloudbeat-fips, chartmuseum-fips, cloudbeat, kube-arangodb-fips, amazon-ecs-agent-fips, zarf,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, envoy-gateway-fips, k8sgpt, crossplane, linkerd2-fips, helm-operator-fips, cluster-api-helm-controller-fips, kubevela-fips, envoy-gateway, cloudbeat-fips, chartmuseum-fips, cloudbeat, kube-arangodb-fips, amazon-ecs-agent-fips, zarf,...

CLEANSTART-2026-PF41398 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121 applied in versions: 3.19.0-r0, 3.19.5-r0, 4.0.1-r0

Multiple security vulnerabilities affect the helm-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UJ10620 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, ghsa-q9hv-hpm4-hj6x applied in versions: 3.19.0-r0, 4.0.1-r0, 4.0.5-r0, 4.0.5-r1

Multiple security vulnerabilities affect the helm-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OT07577 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-1229 applied in versions: 3.19.0-r0, 4.0.1-r0, 4.1.0-r0

Multiple security vulnerabilities affect the helm-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, terraform-provider-azuread-fips, argo-cd, q, crossplane, flux-kustomize-controller, opentofu-fips, crossplane-provider-aws-kms, crossplane-provider-keycloak-fips, kubevela-fips, crossplane-provider-aws-s3-fips, openbao-fips,...

CLEANSTART-2026-VZ85637 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-IG94553 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-UR80185 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-FS64938 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-HX78047 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-JR37040 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-TL71584 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-EL98016 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GS02052 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: swagger, spiffe-helper-fips, kubernetes-dns-node-cache, terraform-provider-tls-fips, kubernetes-dashboard-api, prometheus-node-exporter, hugo-extended, temporal, tempo, crossplane-provider-keycloak-fips, spark-operator-fips, vexctl, grpc-health-probe, hugo-fips,...

CVE-2024-24791 vulnerabilities

Vulnerabilities for packages: swagger, kubernetes-dns-node-cache, grafana-operator-fips, karpenter-fips, temporal, prometheus-node-exporter, hugo-extended, tempo, vexctl, cri-tools, pluto, nri-consul, flux-image-automation-controller, flannel-cni-plugin, cert-manager-webhook-pdns-fips, task, flux...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: swagger, kubernetes-dns-node-cache, grafana-operator-fips, karpenter-fips, temporal, prometheus-node-exporter, tempo, vexctl, grpc-health-probe, cri-tools, pluto, nri-consul, nri-couchbase, flux-image-automation-controller, flannel-cni-plugin,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, trivy, kots, k8sgpt, falcoctl, gitsign, helm-operator-fips, bom, kubevela, flux-helm-controller, pulumi, vexctl, flux-image-reflector-controller, falcoctl-fips, helm-operator, cri-tools, ko-fips, kubescape, buildkitd, skaffold, loki,...