CLEANSTART-2026-IM73098 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the istio-pilot-discovery package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-XB34574 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-BL06950 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-CK72347 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2021-39156 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-7774-7VR3-CC8J vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-QCVW-82HH-GQ38 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2022-23635 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2022-31045 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-XWX5-5C9G-X68X vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: falcoctl, minio-fips, spire-server, boring-registry, mc-fips, falco, minio, falcoctl-fips, mc, spire-server-fips, boring-registry-fips, external-secrets-fips...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: guac, aactl, ko, kubernetes-dashboard, temporal, temporal-ui-server, falco, sops, slsa-verifier, rook, sigstore-scaffolding, nerdctl, apko, dgraph, wolfictl, skopeo, tekton-chains, minio, policy-controller, grpc-health-probe, oauth2-proxy, tkn, kube-rbac-proxy, cosig...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: datadog-agent, kots, guac, kubescape, helm, flux, ko-fips, kubeflow-katib, cri-tools, helm-operator, crane, kpt, chartmuseum, gitsign, cadvisor-fips, docker-machine-driver-harvester, dagger, k8sgpt, nerdctl, tekton-chains, bom, buildkitd, newrelic-infrastructure-agen...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: datadog-agent, kots, guac, kubescape, helm, flux, ko-fips, kubeflow-katib, cri-tools, helm-operator, crane, kpt, chartmuseum, gitsign, cadvisor-fips, docker-machine-driver-harvester, dagger, k8sgpt, nerdctl, tekton-chains, bom, buildkitd, newrelic-infrastructure-agen...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: kubescape, tekton-chains, falcoctl, cosign-fips, falco, falcoctl-fips, gitsign, vexctl...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: tekton-chains, falcoctl, falco, gitsign, kubescape, vexctl...

GHSA-XWX5-5C9G-X68X vulnerabilities

Vulnerabilities for packages: istio-pilot-discovery, istio-pilot-agent, istio-cni, istio-operator...

GHSA-QCVW-82HH-GQ38 vulnerabilities

Vulnerabilities for packages: istio-pilot-discovery, istio-pilot-agent, istio-cni, istio-operator...

GHSA-856Q-XV3C-7F2F vulnerabilities

Vulnerabilities for packages: istio-pilot-discovery, istio-pilot-agent, istio-cni, istio-operator...

CVE-2022-23635 vulnerabilities

Vulnerabilities for packages: istio-pilot-discovery, istio-pilot-agent, istio-cni, istio-operator...