GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-push, kubescape-operator-fips, manifest-tool, ocm-kubernetes-controller-fips, cluster-api-helm-controller, eksctl, gitlab-operator-fips, argo-cd, drone-fips, teleport, rancher-fleet, gitness, chaos-mesh-fips, kots, cloudbeat, kubescape-operator, opentofu-fips,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, vertical-pod-autoscaler, terraform-provider-sendgrid, gitness, minio, kots, sops, ctop, rabbitmq-cluster-operator, buildkitd, helm-operator-fips, kubernetes-dns-node-cache, prometheus-alertmanager-fips, temporal-fips,...

CLEANSTART-2026-JV33217 Security fixes in helm-operator-fips 1.41.1-r2

Package helm-operator-fips version 1.41.1-r2 fixes 52 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2025-68121, CVE-2026-25679, ghsa-p77j-4mvh-x3m3...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent-fips, helm-push, kubescape-operator-fips, manifest-tool, gitlab-rails-ce-fips, scorecard, cluster-api-helm-controller, eksctl, kubevela, syft, docker-cli-buildx, helm, packer, spegel, chainctl, teleport, chaos-mesh-fips, kots, cloudbeat, docker,...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: rancher-security-scan, spire-server-fips, contour, terraform-fips, s5cmd, nvidia-nsight-compute-12.9, terraform-provider-sendgrid, cert-manager-csi-driver, caddy, nvidia-container-toolkit, elvish, gitness, minio, chart-testing-fips, kots, nri-kafka,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, vertical-pod-autoscaler, terraform-provider-sendgrid, gitness, minio, kots, sops, ctop, rabbitmq-cluster-operator, buildkitd, helm-operator-fips, kubernetes-dns-node-cache, prometheus-alertmanager-fips, temporal-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: tekton-chains, policy-controller, falcoctl-fips, kargo, nerdctl, kubescape, scorecard, crane, kpt, pulumi, policy-controller-fips, eksctl, flux-image-reflector-controller, kubeflow-katib, kubevela, slsa-verifier, aactl, cadvisor, helm, argo-workflows, dagger,...