GO-2026-5882 vulnerabilities

Vulnerabilities for packages: xeol-fips, eksctl, trivy-operator, xeol, rancher-fleet-fips, redpanda-operator, gatekeeper, gitlab-operator-fips, kube-mgmt-fips, trivy-fips, gitlab-operator, consul-k8s-fips, conftest-fips, consul-k8s, chartmuseum, ocm-cli, jfrog-cli, argo-cd, kubescape-server,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: buildkitd, cass-operator-fips, terraform-provider-aws, crossplane-provider-aws-dynamodb, hugo, flux-image-reflector-controller, grype, kubernetes-dashboard, flannel, prometheus-node-exporter-fips, kubeflow, mc, kyverno-policy-reporter-ui, conftest-fips,...

CLEANSTART-2026-JV33217 Security fixes in helm-operator-fips 1.41.1-r2

Package helm-operator-fips version 1.41.1-r2 fixes 52 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2025-68121, CVE-2026-25679, ghsa-p77j-4mvh-x3m3...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: buildkitd, syft-fips, xeol-fips, eksctl, trivy-operator, skaffold-fips, docker, xeol, grype, newrelic-infrastructure-agent, redpanda-operator, packer-fips, gatekeeper, k8sgpt, kube-mgmt-fips, kubevela-fips, helm, trivy-fips, gitlab-rails-ce, kaniko, neuvector-fips,...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: buildkitd, kubo, rqlite-fips, kratos, skaffold-fips, kind, xeol, flux-image-reflector-controller, minio-object-browser-fips, packer-fips, argo-events-fips, kubernetes-dashboard, docker-cli-fips, trust-manager-fips, victoriametrics-cluster, metrics-agent-fips, redka,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: buildkitd, cass-operator-fips, terraform-provider-aws, crossplane-provider-aws-dynamodb, hugo, flux-image-reflector-controller, grype, kubernetes-dashboard, flannel, prometheus-node-exporter-fips, kubeflow, mc, kyverno-policy-reporter-ui, conftest-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: buildkitd, docker-credential-gcr, flux-helm-controller, kubeflow-katib, skaffold, falcoctl-fips, ctop, kots, eksctl, k3d, slsa-verifier, skopeo, falcoctl, kubevela, helm-fips, flux-image-reflector-controller, helm-operator, loki, cri-tools,...