29 matches found
CLEANSTART-2026-CP77103 Security fixes in istio-pilot-discovery-fips 1.26.7-r0
Package istio-pilot-discovery-fips version 1.26.7-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-HX84275 Security fixes in istio-pilot-discovery 1.28.1-r0
Package istio-pilot-discovery version 1.28.1-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-IM73098 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the istio-pilot-discovery package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-XB34574 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-BL06950 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-CK72347 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the istio-pilot-discovery-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CVE-2022-23635 vulnerabilities
Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...
CVE-2022-31045 vulnerabilities
Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...
GHSA-856Q-XV3C-7F2F vulnerabilities
Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...
GHSA-QCVW-82HH-GQ38 vulnerabilities
Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...
GHSA-7774-7VR3-CC8J vulnerabilities
Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...
CVE-2021-39156 vulnerabilities
Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...
GHSA-XWX5-5C9G-X68X vulnerabilities
Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...
GHSA-HQXW-MM44-GC4R vulnerabilities
Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...
CVE-2019-14993 vulnerabilities
Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...
GHSA-HJ3V-M684-V259 vulnerabilities
Vulnerabilities for packages: boring-registry, external-secrets-fips, mc-fips, minio-fips, falcoctl, mc, boring-registry-fips, spire-server-fips, minio, falcoctl-fips, spire-server...
GHSA-C5Q2-7R4C-MV6G vulnerabilities
Vulnerabilities for packages: melange, zot, bank-vaults, rekor, sops, rabbitmq-messaging-topology-operator, tekton-chains, spire-server, caddy, kube-rbac-proxy, grpc-health-probe, zarf, gitsign, skopeo, terragrunt, falcoctl, tkn, flux-source-controller, frp, kubescape, aactl, fulcio, dgraph, dex,...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: helm-fips, k3s, cri-tools, goreleaser, ko-fips, kubevela, cadvisor-fips, argo-workflows, docker-machine-driver-harvester, k8sgpt, newrelic-infrastructure-agent, ctop, policy-controller, skopeo, chartmuseum, buildkitd, crane, helm, slsa-verifier, k3d, vexctl, cosign,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: helm-fips, k3s, cri-tools, goreleaser, ko-fips, kubevela, cadvisor-fips, argo-workflows, docker-machine-driver-harvester, k8sgpt, newrelic-infrastructure-agent, ctop, policy-controller, skopeo, chartmuseum, buildkitd, crane, helm, slsa-verifier, k3d, vexctl, cosign,...