CLEANSTART-2026-UL17352 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow, slsa-verifier, prometheus-blackbox-exporter, vault-csi-provider, kubernetes-csi-livenessprobe-fips, metrics-server-fips, dgraph, prometheus-stackdriver-exporter, src, kubevela, kubernetes-csi-livenessprobe, bank-vaults-fips, falco,...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: caddy, up, kubernetes-fips, metrics-server-fips, cert-manager, kubernetes, kubevela, kube-oidc-proxy, prometheus-adapter, k3s, rancher-webhook-fips, buildkitd, rancher-webhook...