40 matches found
GHSA-JPCC-P29G-P8MQ vulnerabilities
Vulnerabilities for packages: rancher-agent, cluster-api-helm-controller, crossplane, k8sgpt, rancher-helm, manifest-tool, redpanda-operator, neuvector, harvester-fips, kubescape-server-fips, cloudbeat-fips, fuse-overlayfs-snapshotter, trivy-operator-fips, cloudbeat, consul-k8s, trivy-operator,...
GHSA-XHF5-7WJV-PQXP vulnerabilities
Vulnerabilities for packages: rancher-agent, cluster-api-helm-controller, crossplane, k8sgpt, rancher-helm, manifest-tool, redpanda-operator, neuvector, harvester-fips, kubescape-server-fips, cloudbeat-fips, fuse-overlayfs-snapshotter, trivy-operator-fips, cloudbeat, consul-k8s, trivy-operator,...
CLEANSTART-2026-PF41398 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121 applied in versions: 3.19.0-r0, 3.19.5-r0, 4.0.1-r0
Multiple security vulnerabilities affect the helm-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UJ10620 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, ghsa-q9hv-hpm4-hj6x applied in versions: 3.19.0-r0, 4.0.1-r0, 4.0.5-r0, 4.0.5-r1
Multiple security vulnerabilities affect the helm-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OT07577 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-1229 applied in versions: 3.19.0-r0, 4.0.1-r0, 4.1.0-r0
Multiple security vulnerabilities affect the helm-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
PT-2026-42317
Multiple security vulnerabilities affect the helm-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, reports-server, crossplane-provider-azure-authorization, crossplane, terragrunt, crossplane-provider-aws-elasticache, osv-scanner, kyverno, omnictl-multiarch, databricks-cli, cluster-api-fips,...
CLEANSTART-2026-VZ85637 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-IG94553 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-UR80185 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-FS64938 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-HX78047 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-TL71584 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-JR37040 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-EL98016 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-GS02052 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
GHSA-V778-237X-GJRC vulnerabilities
Vulnerabilities for packages: postgres-operator, terragrunt, crossplane, osv-scanner, kube-metrics-adapter, fluent-bit-plugin-loki, crossplane-provider-aws-iam, trillian, node-problem-detector, keda, prometheus-statsd-exporter-fips, src-fingerprint, sftpgo-plugin-pubsub, fulcio-fips, distribution...
CVE-2024-24791 vulnerabilities
Vulnerabilities for packages: postgres-operator, terragrunt, osv-scanner, nvidia-nsight-compute-12.8, fluent-bit-plugin-loki, velero-plugin-for-csi-fips, trillian, kuberay-operator, nri-prometheus, prometheus-statsd-exporter-fips, docker-credential-gcr, src-fingerprint, supercronic, http-echo,...
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: postgres-operator, terragrunt, osv-scanner, nvidia-nsight-compute-12.8, fluent-bit-plugin-loki, velero-plugin-for-csi-fips, trillian, node-problem-detector, kuberay-operator, nri-prometheus, prometheus-statsd-exporter-fips, docker-credential-gcr, src-fingerprint,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: kpt, zot, cosign, k8sgpt, slsa-verifier, helm-operator, cri-tools, up, kubescape, k3s, kargo, goreleaser, kubevela, cadvisor, kots, helm-fips, rancher-machine, aactl, ko-fips, scorecard, flux, gitsign, helm-operator-fips, flux-helm-controller, chartmuseum, falcoctl,...