GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, helm-fips, docker-cli-buildx-fips, helm-mapkubeapis, kaniko-fips, neuvector-scanner, kgateway, rancher-agent, tw, teleport, cloudbeat-fips, newrelic-infrastructure-agent, headlamp, manifest-tool, eksctl, helm, redpanda-operator,...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: supercronic, direnv, databricks-cli-fips, kubescape-operator-fips, cerbos-fips, jitsucom-bulker, rancher-agent, eck-operator, apko-fips, argo-cd-fips, eksctl, ini-file, qemu-guesthelper, tigera-operator-fips, polaris-fips, cluster-api-ipam-provider-in-cluster,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: supercronic, hugo, newrelic-infrastructure-agent, eksctl, tigera-operator-fips, kubernetes, crossplane-provider-aws-s3, chartmuseum, crossplane-provider-aws-lambda, spire-server-fips, nri-discovery-kubernetes, kubernetes-dashboard-fips, protoc-gen-go-grpc, buf,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: zot, buildkitd, cosign, datadog-agent, argo-workflows, cosign-fips, gitsign, helm-fips, tekton-chains, flux, policy-controller-fips, vexctl, cert-manager, falcoctl, k3s, newrelic-infrastructure-agent, k3d, loki, guac, docker-machine-driver-harvester, cert-manager-fip...