CLEANSTART-2026-UT23053 Security fixes in helm-operator 1.42.2-r3

Package helm-operator version 1.42.2-r3 fixes 4 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-JV33217 Security fixes in helm-operator-fips 1.41.1-r2

Package helm-operator-fips version 1.41.1-r2 fixes 52 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2025-68121, CVE-2026-25679, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-CY22332 Security fixes in helm-operator 1.42.2-r1

Package helm-operator version 1.42.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-AU93241 Security fixes in helm-operator 1.42.1-r0

Package helm-operator version 1.42.1-r0 fixes 30 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, ghsa-p77j-4mvh-x3m3, CVE-2026-27143, CVE-2026-42499...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kyverno, rancher, rke2-cloud-provider, argocd-image-updater, pulumi-kubernetes-operator, kubernetes, cluster-api-gcp-controller, opentelemetry-operator, emissary, gitlab-kas, cluster-api-aws-controller, calico, cilium, rancher-system-agent, cluster-api-helm-controlle...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cilium-fips, cass-operator-fips, kong-ingress-controller-fips, tetragon-fips, chainloop-control-plane-fips, image-factory-fips, rancher-support-bundle-kit, hubble-fips, k8s-agents-operator, crossplane-provider-kubernetes-fips, cluster-api-helm-controller-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-fips, chainctl, amazon-ecs-agent, headlamp-fips, google-osconfig-agent, newrelic-infrastructure-agent-fips, helm-push, jfrog-cli, cluster-api-helm-controller-fips, cloudbeat, gatekeeper, harvester, tw, kaniko-fips, helmfile, envoy-gateway-fips, chartmuseum,...

CLEANSTART-2026-CL67452 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-35206, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, CVE-2026-46680, ghsa-fqw6-gf59-qr4w, ghsa-hfvc-g4fc-pqhx, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-pc3f-x583-g7j2 applied in versions: 1.41.1-r0, 1.41.1-r1, 1.42.2-r0, 1.42.2-r1

Multiple security vulnerabilities affect the helm-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: kubescape, kuma, helm-docs, flux, trivy, cerbos, linkerd2, zarf, helm-mapkubeapis, headlamp, pluto, consul-k8s, nova, helm-push, teleport, zot, helm-operator, kots, k8ssandra-client, istio, trivy-operator, chart-testing, cilium-cli, envoy-gateway,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: kubescape, kuma, helm-docs, flux, trivy, cerbos, linkerd2, zarf, helm-mapkubeapis, headlamp, pluto, consul-k8s, nova, helm-push, teleport, zot, helm-operator, kots, k8ssandra-client, istio, trivy-operator, chart-testing, cilium-cli, envoy-gateway,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: chaos-mesh-fips, chart-testing-fips, nova-fips, pluto-fips, kube-arangodb-fips, rancher-fleet-fips, chart-testing, cilium-cli, helm-operator-fips, cluster-api-helm-controller, linkerd2-fips, consul-k8s, linkerd2, harbor-fips, kubescape-server, zot, trivy-operator,...

CLEANSTART-2026-PM59896 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.41.1-r0, 1.41.1-r1

Multiple security vulnerabilities affect the helm-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: multus-cni, pulumi-language-yaml, pulumi-kubernetes-operator, cilium-envoy, terraform-provider-sendgrid, redpanda, opa, kiali, db-operator, trillian, amazon-cloudwatch-agent, oauth2-proxy, dkron, knative-eventing, cilium-cli, seaweedfs, azcopy, hubble,...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: multus-cni, pulumi-language-yaml, pulumi-kubernetes-operator, cilium-envoy, terraform-provider-sendgrid, redpanda, opa, kiali, db-operator, trillian, amazon-cloudwatch-agent, oauth2-proxy, dkron, knative-eventing, cilium-cli, seaweedfs, azcopy, hubble,...

CLEANSTART-2026-NS41924 Within HostnameError

Multiple security vulnerabilities affect the helm-operator package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: kubescape, helm-docs, flux, trivy, cerbos, linkerd2, zarf, helm-mapkubeapis, headlamp, kargo, k8sgpt, pluto, flux-helm-controller, consul-k8s, nova, helm-push, zot, helm-operator, kots, k8ssandra-client, istio, trivy-operator, chart-testing, cilium-cli, envoy-gateway...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: kubescape, helm-docs, flux, trivy, cerbos, linkerd2, zarf, helm-mapkubeapis, headlamp, kargo, k8sgpt, pluto, flux-helm-controller, consul-k8s, nova, helm-push, zot, helm-operator, kots, k8ssandra-client, istio, trivy-operator, chart-testing, cilium-cli, envoy-gateway...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: kubescape, helm-docs, flux, trivy, cerbos, linkerd2, zarf, helm-mapkubeapis, headlamp, kargo, k8sgpt, pluto, flux-helm-controller, consul-k8s, nova, helm-push, zot, helm-operator, kots, k8ssandra-client, istio, trivy-operator, chart-testing, cilium-cli, envoy-gateway...