GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, chainctl-fips, skaffold, chaos-mesh, steampipe, cluster-api-helm-controller, k9s-fips, trivy-operator-fips, cloudbeat-fips, xeol, spegel-fips, kubescape-server, skaffold-fips, helm-operator, tw, crossplane-fips, gatekeeper,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, chainctl-fips, skaffold, chaos-mesh, steampipe, cluster-api-helm-controller, k9s-fips, trivy-operator-fips, cloudbeat-fips, xeol, spegel-fips, kubescape-server, skaffold-fips, helm-operator, tw, crossplane-fips, gatekeeper,...

CLEANSTART-2026-PF41398 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121 applied in versions: 3.19.0-r0, 3.19.5-r0, 4.0.1-r0

Multiple security vulnerabilities affect the helm-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UJ10620 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, ghsa-q9hv-hpm4-hj6x applied in versions: 3.19.0-r0, 4.0.1-r0, 4.0.5-r0, 4.0.5-r1

Multiple security vulnerabilities affect the helm-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OT07577 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61727, CVE-2025-61729, CVE-2026-1229 applied in versions: 3.19.0-r0, 4.0.1-r0, 4.1.0-r0

Multiple security vulnerabilities affect the helm-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, flux-source-controller, q, amazon-ssm-agent, kyverno-notation-aws-fips, witness, opentofu-fips, skaffold, src-fingerprint, crossplane-provider-azure-storage, k9s-fips,...

CLEANSTART-2026-VZ85637 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-IG94553 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-UR80185 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-FS64938 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-HX78047 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-JR37040 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-TL71584 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-EL98016 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GS02052 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api-fips, crossplane-provider-azure-sql, trillian, amazon-ssm-agent, minio, sftpgo-plugin-pubsub, caddy, kapp-controller, kube-fluentd-operator, sigstore-scaffolding, cortex-fips, conftest, kyverno-policy-reporter-fips, goreleaser, git-lfs, kiam,...

CVE-2024-24791 vulnerabilities

Vulnerabilities for packages: trillian, minio, minify, caddy, stakater-reloader, cortex-fips, conftest, goreleaser, docker-credential-ecr-login, git-lfs, kiam, rabbitmq-messaging-topology-operator, flux-notification-controller, k3d, external-secrets-fips, vertical-pod-autoscaler-fips,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: trillian, minify, caddy, kube-fluentd-operator, stakater-reloader, sigstore-scaffolding, cortex-fips, conftest, docker-credential-ecr-login, git-lfs, kiam, rabbitmq-messaging-topology-operator, flux-notification-controller, k3d, external-secrets-fips, helm-operator,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: kargo, kubescape, kubevela, dagger, helm-fips, kpt, timoni, ctop, skaffold, flux-image-reflector-controller, argo-workflows, helm-operator-fips, ko-fips, buildkitd, kubeflow-katib, pulumi, slsa-verifier, goreleaser, helm, k9s, rancher-machine, cri-tools, falcoctl-fip...