GO-2026-5882 vulnerabilities

Vulnerabilities for packages: k9s, helm-mapkubeapis, cert-manager-cmctl-fips, trivy-fips, vcluster, chartmuseum-fips, trivy, crossplane, chaos-mesh, chaos-mesh-fips, envoy-gateway-fips, rancher-fleet, helm-exporter-fips, jfrog-cli, consul-k8s-fips, ocm-kubernetes-controller-fips, tigera-operator,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: dex-fips, aws-efs-csi-driver-fips, trivy, crossplane-provider-aws-kinesis, metacontroller, boring-registry-fips, tigera-operator, minio-fips, prometheus-redis-exporter-fips, buildkitd, supercronic, pgpool2exporter-fips, prometheus-statsd-exporter-fips,...

CLEANSTART-2026-JV33217 Security fixes in helm-operator-fips 1.41.1-r2

Package helm-operator-fips version 1.41.1-r2 fixes 52 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2025-68121, CVE-2026-25679, ghsa-p77j-4mvh-x3m3...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: k9s, helm-mapkubeapis, trivy-fips, chartmuseum-fips, trivy, crossplane, chaos-mesh, chaos-mesh-fips, envoy-gateway-fips, datadog-agent, skaffold-fips, helm-exporter-fips, jfrog-cli, consul-k8s-fips, tigera-operator, trivy-operator, wolfictl,...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: azure-service-operator-fips, wait-for-port, dex-fips, bento, vault-fips, db-operator, trivy, blob-csi-fips, kratos, rancher-fleet, gosu, cfssl-fips, eck-operator, request-1279-14, tigera-operator, karpenter, minio-fips, kubernetes-dashboard-web-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: dex-fips, aws-efs-csi-driver-fips, trivy, crossplane-provider-aws-kinesis, metacontroller, boring-registry-fips, tigera-operator, minio-fips, prometheus-redis-exporter-fips, buildkitd, supercronic, pgpool2exporter-fips, prometheus-statsd-exporter-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, k9s, helm-fips, timoni, rancher-machine, skaffold, cadvisor-fips, cosign, kargo, trivy, cri-tools, argo-workflows, aactl, helm-operator-fips, bom, kubeflow-katib, tekton-chains, kubevela, slsa-verifier, dagger, kots, k8sgpt, zot, gitsign,...