CLEANSTART-2026-KD56699 Security fixes in metrics-server-fips 0.8.0-r5

Package metrics-server-fips version 0.8.0-r5 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-BL61826 Security fixes in metrics-server-fips 0.7.2-r3

Package metrics-server-fips version 0.7.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-UL17352 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: plutono-fips, dynamic-localpv-provisioner-fips, dgraph, prometheus-adapter-fips, aactl, prometheus-stackdriver-exporter, metrics-server-fips, conftest-fips, kiam, cortex, volume-modifier-for-k8s-fips, smarter-device-manager-fips, aws-efs-csi-driver-fips, src,...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, rancher-webhook, kubevela, kubernetes-fips, kube-oidc-proxy, kubernetes, prometheus-adapter, k3s, up, caddy, buildkitd, metrics-server-fips...