CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, tigera-operator, zarf, conftest-fips, harvester-fips, maru, kyverno-notation-aws-fips, consul-k8s, ocm-cli-fips, rancher-fleet-fips, xeol, gitlab-operator, jfrog-cli, chaos-mesh, kubescape-operator-fips, crossplane-fips, drone, rancher-helm,...

CLEANSTART-2026-CZ42417 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.35.0-r0

Multiple security vulnerabilities affect the kubernetes-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RD43272 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.35.0-r0

Multiple security vulnerabilities affect the kubernetes-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RZ88142 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.35.0-r0, 1.35.4-r0

Multiple security vulnerabilities affect the kubernetes-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VU62737 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-KK99760 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-NL96892 Within HostnameError

Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-YK54840 Within HostnameError

Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-RT10702 Within HostnameError

Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-SO17846 Within HostnameError

Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DN37053 Within HostnameError

Multiple security vulnerabilities affect the kubernetes-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-DV06422 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-SO16176 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2025-AZ51267 Security fixes for GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-US16386 Security fixes for GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.7.2-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, rke2-runtime, rancher, grafana-alloy, kubernetes, eks-distro, buildah, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes-fips, podman, sriov-network-device-plugin-fips, grafana-alloy-fips, node-feature-discovery,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, rke2-runtime, rancher, grafana-alloy, kubernetes, eks-distro, buildah, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes-fips, podman, sriov-network-device-plugin-fips, grafana-alloy-fips, node-feature-discovery,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, rke2-runtime, rancher, grafana-alloy, kubernetes, eks-distro, buildah, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes-fips, podman, sriov-network-device-plugin-fips, grafana-alloy-fips, node-feature-discovery,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, rke2-runtime, rancher, grafana-alloy, kubernetes, eks-distro, buildah, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes-fips, podman, sriov-network-device-plugin-fips, grafana-alloy-fips, node-feature-discovery,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: seaweedfs, k8ssandra-client, secrets-store-csi-driver-provider-azure-fips, grafana-agent-operator, postgres-operator, cortex-fips, influx, restic, rqlite-fips, thanos, flux-helm-controller, prometheus-operator, kubecolor, witness, metallb-fips, apko-fips, cerbos,...