CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating-fips, crossplane-provider-aws-efs-fips, cert-manager, temporal-server, gomplate, k8s-metacollector-fips, docker-credential-ecr-login-fips, prometheus-mysqld-exporter, cluster-api-gcp-controller-fips, apache-exporter, bom,...

CLEANSTART-2026-EZ55127 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metallb-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...