CLEANSTART-2026-NV82543 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-UL17352 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-AU31441 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-VQ7J-GX56-RXJH vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...

GHSA-VV9M-32RR-3G55 vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...

GHSA-9V7R-X7CV-V437 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-892H-R6CR-53G4 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-RXV8-V965-V333 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: ferretdb, ytt, kubernetes-dashboard-metrics-scraper, up, litefs, sbom-scorecard, nats, kubernetes-dashboard, kind, direnv, grafana-operator, local-path-provisioner, k8ssandra-operator, configmap-reload, kubewatch, nfs-subdir-external-provisioner, slsa-verifier,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: ferretdb, ytt, kubernetes-dashboard-metrics-scraper, up, litefs, sbom-scorecard, nats, kubernetes-dashboard, kind, direnv, grafana-operator, local-path-provisioner, k8ssandra-operator, configmap-reload, kubewatch, nfs-subdir-external-provisioner, slsa-verifier,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: nats, slsa-verifier, aactl, openfga, minify, kube-fluentd-operator, helm-operator, skopeo, harbor-cli, certificate-transparency, overmind, cni-plugins, shfmt, kafkaexporter, gke-gcloud-auth-plugin, dagdotdev, k9s, sftpgo-plugin-eventsearch, oras, velero-plugin-for-cs...

GHSA-RXV8-V965-V333 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-VQ7J-GX56-RXJH vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...

GHSA-892H-R6CR-53G4 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-9V7R-X7CV-V437 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: kind, configmap-reload-fips, kubeflow-katib, metrics-server, smarter-device-manager-fips...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, oauth2-proxy, kubernetes-csi-driver-hostpath, capslock, zot, mockery, tigera-operator-fips, nfs-subdir-external-provisioner-fips, logstash-exporter-fips, wait-for-port, azure-aad-pod-identity-mic, fulcio, fuse-overlayfs-snapshotter,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: syft, ferretdb, kubernetes-dashboard-metrics-scraper, crossplane-provider-aws-sqs, litefs, kargo, nats, spicedb, boring-registry, up, kubernetes-dashboard, ollama, grafana-operator, local-path-provisioner, k8ssandra-operator, configmap-reload, kubewatch,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, logstash-exporter-fips, cass-operator, terraform-provider-azurerm, rabbitmq-messaging-topology-operator, docker-compose, prometheus-redis-exporter-fips, cosign-fips, vault-k8s-fips, kustomize, prometheus-beat-exporter,...