GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: tigera-operator, helm, nerdctl, terraform, k3s, argo-workflows-fips, kubescape-server, traefik, gitea-fips, omnictl-multiarch, k9s-fips, kubescape-server-fips, external-dns, opentofu, knative-kafka-broker, skaffold-fips, drone, trivy-operator, minio-fips, kaf,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: grype-db, cg, tigera-operator, helm, chainctl, nerdctl, terraform, rootlesskit-fips, k3s, apko, argo-workflows-fips, kubescape-server, gitlab-runner-fips, gomplate, traefik, gitea-fips, omnictl-multiarch, k9s-fips, kubescape-server-fips, external-dns, opentofu,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: grype-db, ko-fips, caddy, cg, tigera-operator, crossplane-provider-azure-synapse, chainctl, helm, nerdctl, terraform, rootlesskit-fips, k3s, apko, argo-workflows-fips, cosign, crossplane-provider-azure-policyinsights, gitlab-runner-fips,...

CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-LS08172 Within HostnameError

Multiple security vulnerabilities affect the prometheus-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: gitsign, kots, rancher-machine, bom, ko-fips, aactl, k8sgpt, kargo, helm, nerdctl, dagger, helm-operator, buildkitd, k3s, chartmuseum, argo-workflows-fips, cadvisor, cosign, cert-manager, helm-operator-fips, loki, kubevela, skopeo, timoni, cosign-fips, falco,...

CVE-2023-45286 vulnerabilities

Vulnerabilities for packages: rclone...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: bom, aactl, paranoia, k3s, chartmuseum, cert-manager, rancher-agent, falco, scorecard, ctop, kubescape, skaffold, falcoctl-fips, kpt, slsa-verifier, spire-server-fips, k3d, tekton-chains, up...