CLEANSTART-2026-GR62343 Security fixes in istio-pilot-discovery 1.28.3-r0

Package istio-pilot-discovery version 1.28.3-r0 fixes 1 vulnerabilities: ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-CP77103 Security fixes in istio-pilot-discovery-fips 1.26.7-r0

Package istio-pilot-discovery-fips version 1.26.7-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-HX84275 Security fixes in istio-pilot-discovery 1.28.1-r0

Package istio-pilot-discovery version 1.28.1-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-XB34574 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-IM73098 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the istio-pilot-discovery package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-BL06950 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-CK72347 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2022-23635 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2022-31045 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-QCVW-82HH-GQ38 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-856Q-XV3C-7F2F vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-7774-7VR3-CC8J vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2021-39156 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-XWX5-5C9G-X68X vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-HQXW-MM44-GC4R vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2019-14993 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: falcoctl, minio, falcoctl-fips, mc-fips, spire-server-fips, boring-registry, mc, spire-server, boring-registry-fips, minio-fips, external-secrets-fips...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: k3s, kots, grpc-health-probe, vexctl, rekor, kube-rbac-proxy, gitsign, caddy, ko, cosign, skaffold, policy-controller, nerdctl, dex, frp, flux-kustomize-controller, goreleaser, spire-server, weaviate, minio, timestamp-authority, tkn, aactl, oauth2-proxy, falcoctl,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: pulumi, vexctl, tekton-chains, k3d, cadvisor, up, flux-helm-controller, cadvisor-fips, rancher-machine, aactl, docker-credential-gcr, loki, kargo, zarf, flux-image-reflector-controller, helm, falcoctl-fips, gitsign, bom, guac, skopeo, cosign, argo-workflows-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: pulumi, vexctl, tekton-chains, k3d, cadvisor, up, flux-helm-controller, cadvisor-fips, rancher-machine, aactl, docker-credential-gcr, loki, kargo, zarf, flux-image-reflector-controller, helm, falcoctl-fips, gitsign, bom, guac, skopeo, cosign, argo-workflows-fips,...