CLEANSTART-2026-NV82543 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-VQ7J-GX56-RXJH vulnerabilities

Vulnerabilities for packages: metrics-server, kubeflow-katib, kind...

GHSA-VV9M-32RR-3G55 vulnerabilities

Vulnerabilities for packages: metrics-server, kubeflow-katib, kind...

GHSA-9V7R-X7CV-V437 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-892H-R6CR-53G4 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-RXV8-V965-V333 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: metrics-server, kubeflow-katib, kind...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: spark-operator, kube-state-metrics, gosu, secrets-store-csi-driver-provider-gcp, secrets-store-csi-driver-provider-azure, metallb, kubevela, grype, esbuild, thanos-operator, yam, docker-cli, runc, hubble-ui, kube-rbac-proxy, k3d, cluster-proportional-autoscaler,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: spark-operator, kube-state-metrics, gosu, secrets-store-csi-driver-provider-gcp, secrets-store-csi-driver-provider-azure, metallb, kubevela, grype, esbuild, thanos-operator, yam, docker-cli, runc, hubble-ui, kube-rbac-proxy, k3d, cluster-proportional-autoscaler,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: gosu, fscrypt, esbuild, sqlexporter, runc, nri-jmx, terraform-docs, vt-cli, wuzz, src-fingerprint, argo-workflows, pdfcpu, aactl, distribution, flux, rabbitmq-messaging-topology-operator, nri-prometheus, supercronic, volume-modifier-for-k8s,...

GHSA-RXV8-V965-V333 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-892H-R6CR-53G4 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-VQ7J-GX56-RXJH vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, metrics-server...

GHSA-9V7R-X7CV-V437 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: kind, smarter-device-manager-fips, configmap-reload-fips, kubeflow-katib, metrics-server...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: conftest-fips, trivy, cert-manager-webhook-pdns, harbor-registry-fips, oras, src-fingerprint, kube-oidc-proxy, tekton-chains, influx, cosign, wireguard-go, local-path-provisioner, fulcio, mongo-tools, falcosidekick, k9s, prometheus-postgres-exporter-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: spark-operator, kube-state-metrics, crossplane-provider-azure-authorization, syft, secrets-store-csi-driver-provider-gcp, secrets-store-csi-driver-provider-azure, metallb, kubevela, grype, kubescape, thanos-operator, crossplane-provider-aws-dynamodb, cloudflared, run...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: trivy, kube-oidc-proxy, buf, prometheus-blackbox-exporter, crossplane-provider-aws-iam, kubernetes-dashboard-metrics-scraper, kube-state-metrics, rekor, scorecard, kube-logging-logging-operator, k8ssandra-operator-fips, trillian-fips, secrets-store-csi-driver,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: spark-operator, kube-state-metrics, gosu, secrets-store-csi-driver-provider-gcp, secrets-store-csi-driver-provider-azure, metallb, kubevela, grype, esbuild, thanos-operator, yam, docker-cli, runc, hubble-ui, kube-rbac-proxy, k3d, cluster-proportional-autoscaler,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: conftest-fips, kube-oidc-proxy, aws-efs-csi-driver-fips, kiam, slsa-verifier, kubernetes-csi-livenessprobe, timestamp-authority-fips, dynamic-localpv-provisioner-fips, prometheus-blackbox-exporter, metrics-server-fips, vault-csi-provider,...