GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, cilium-cli, conftest-fips, trivy-operator, xeol, zarf-fips, conftest, rancher-fleet, gitlab-operator-fips, maru, kubescape-operator-fips, argocd-image-updater, chartmuseum-fips, oras, tigera-operator-fips, drone, opentofu-fips, consul-k8s-fips,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: atlantis-fips, vertical-pod-autoscaler, smarter-device-manager, cilium-cli, conftest-fips, secrets-store-csi-driver-provider-gcp, temporal-server, rook, nodetaint, external-secrets-fips, newrelic-infra-operator, azure-aad-pod-identity-mic, kubeflow-fips,...

CLEANSTART-2026-JV33217 Security fixes in helm-operator-fips 1.41.1-r2

Package helm-operator-fips version 1.41.1-r2 fixes 52 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2025-68121, CVE-2026-25679, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-VY72501 Security fixes in helm-operator-fips 1.41.1-r0

Package helm-operator-fips version 1.41.1-r0 fixes 3 vulnerabilities: ghsa-9h84-gmv7-982p, ghsa-mf38-5pwr-xv68, ghsa-x4rx-4gw5-53pq...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, docker, trivy-operator, xeol, zarf-fips, k3s, amazon-ecs-agent-fips, syft-fips, helmfile, kubescape-operator-fips, chartmuseum-fips, google-osconfig-agent, grype-db, tigera-operator-fips, consul-k8s-fips, kaniko-fips, tigera-operator, neuvector-fips...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, smarter-device-manager, cilium-cli, conftest-fips, azure-ipam, nvidia-nsight-compute-13.0, secrets-store-csi-driver-provider-gcp, rook, kubebuilder, nova-fips, http-echo, cluster-api-azure-controller, newrelic-infra-operator, vt-cli,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: atlantis-fips, vertical-pod-autoscaler, smarter-device-manager, cilium-cli, conftest-fips, secrets-store-csi-driver-provider-gcp, temporal-server, rook, nodetaint, external-secrets-fips, newrelic-infra-operator, azure-aad-pod-identity-mic, kubeflow-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: aactl, pulumi, buildkitd, k9s, bom, flux-image-reflector-controller, cadvisor, k3s, argo-workflows-fips, cri-tools, crane, zarf, kubescape, k3d, newrelic-infrastructure-agent, zot, timoni, kargo, dagger, kpt, scorecard, guac, helm, tekton-chains, vexctl, skopeo,...