GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: grype-fips, scorecard, teleport, zarf, kube-arangodb, kube-mgmt-fips, xeol-fips, neuvector, gitlab-rails-ce-fips, kubescape, grype, cluster-api-helm-controller-fips, crossplane, kube-arangodb-fips, cloudbeat, chartmuseum-fips, trivy-operator-fips, neuvector-scanner,...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: git-credential-oauth, wavefront-collector-for-kubernetes, configmap-reload, mig-parted, nvidia-nsight-compute-12.8, temporal-server-fips, mkcert, xeol-fips, nvidia-nsight-compute-13.1, flux-source-controller-fips, metallb, crossplane-provider-azure-sql, dive,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: scorecard, kyverno-policy-reporter-kyverno-plugin, wavefront-collector-for-kubernetes, configmap-reload, temporal-server-fips, metallb, crossplane-provider-azure-sql, gitsign, crossplane-provider-aws-sns, thanos-operator, vault-csi-provider,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: k9s, kpt, cadvisor-fips, guac, kubeflow-katib, scorecard, helm, dagger, policy-controller, k8sgpt, skopeo, slsa-verifier, tekton-chains, goreleaser, zot, helm-operator-fips, cadvisor, loki, docker-machine-driver-harvester, chartmuseum, skaffold, argo-workflows-fips,...