GO-2026-5882 vulnerabilities

Vulnerabilities for packages: headlamp-fips, envoy-gateway-fips, jfrog-cli, kgateway-fips, trivy-operator-fips, gatekeeper, kube-mgmt, opentofu, cluster-api-helm-controller, oras, rancher-agent, xeol, cloudbeat-fips, helm-exporter-fips, envoy-gateway, opentofu-fips, cloudbeat, helm-operator,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, prometheus-redis-exporter, dex, k8ssandra-operator, helm, aws-load-balancer-controller, php-fpmexporter, src, dex-fips, frp, logstash-exporter-fips, prometheus-blackbox-exporter, kaf, grpc-health-probe, terraform-provider-sendgrid-fips,...

CLEANSTART-2026-VY72501 Security fixes in helm-operator-fips 1.41.1-r0

Package helm-operator-fips version 1.41.1-r0 fixes 3 vulnerabilities: ghsa-9h84-gmv7-982p, ghsa-mf38-5pwr-xv68, ghsa-x4rx-4gw5-53pq...

CLEANSTART-2026-JV33217 Security fixes in helm-operator-fips 1.41.1-r2

Package helm-operator-fips version 1.41.1-r2 fixes 52 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2025-68121, CVE-2026-25679, ghsa-p77j-4mvh-x3m3...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-fips, headlamp-fips, envoy-gateway-fips, spegel, buildkitd-fips, jfrog-cli, helm, neuvector-scanner-fips, kgateway-fips, trivy-operator-fips, gatekeeper, neuvector, docker-cli-buildx-fips, kube-mgmt, zot, cluster-api-helm-controller, kaniko, packer-fips, k8sgp...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: polaris-fips, kubernetes-csi-driver-nfs, prometheus-redis-exporter, dex, k8ssandra-operator, influxd, helm, prometheus, longhorn-instance-manager, aws-load-balancer-controller, dask-gateway, src, tekton-pipelines-fips, dex-fips, trivy-operator-fips, hello-world-golan...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, prometheus-redis-exporter, dex, k8ssandra-operator, helm, aws-load-balancer-controller, php-fpmexporter, src, dex-fips, frp, logstash-exporter-fips, prometheus-blackbox-exporter, kaf, grpc-health-probe, terraform-provider-sendgrid-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: pulumi, vexctl, tekton-chains, k3d, cadvisor, up, flux-helm-controller, cadvisor-fips, rancher-machine, aactl, docker-credential-gcr, loki, kargo, zarf, flux-image-reflector-controller, helm, falcoctl-fips, gitsign, bom, guac, skopeo, cosign, argo-workflows-fips,...