CLEANSTART-2026-UL17352 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, kubevela, cortex, scorecard, timestamp-authority-fips, falcoctl-fips, k3d, up, bank-vaults-fips, kubernetes-csi-livenessprobe-fips, buildkitd, prometheus-stackdriver-exporter, spark-operator, terraform-provider-sendgrid-fips,...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, up, rancher-webhook, kubevela, caddy, buildkitd, rancher-webhook-fips, kubernetes-fips, k3s, prometheus-adapter, kube-oidc-proxy, kubernetes...