GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: trivy, kgateway, newrelic-infrastructure-agent, helm-operator-fips, spegel-fips, grype, chaos-mesh-fips, k9s, grype-fips, skaffold-fips, helm-operator, kube-arangodb, scorecard, kots, trivy-fips, newrelic-infrastructure-agent-fips, docker-compose-fips,...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: fulcio-fips, nri-redis, opentofu-fips, gatekeeper-fips, kubelet-csr-approver-fips, opentelemetry-collector, licenseclassifier, yace, kubernetes-dashboard-metrics-scraper, kubernetes, nri-memcached, sonobuoy-fips, flux-helm-controller-fips, cilium-fips, http-echo,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: fulcio-fips, php-fpmexporter, newrelic-infrastructure-agent, kubernetes-dashboard-metrics-scraper, up, kubernetes, cilium-fips, crossplane-provider-azure-authorization, prometheus-alertmanager-fips, cfssl, scorecard, crossplane-provider-azure-managedidentity, litefs,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, trivy, crane, argo-workflows, cri-tools, kpt, ctop, pulumi, skopeo, helm-fips, newrelic-infrastructure-agent, flux-image-reflector-controller, vexctl, helm-operator-fips, argo-workflows-fips, up, falcoctl, guac, aactl, k9s, kubevela,...