GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: drone, crossplane-provider-azure-servicelinker, docker-cli-buildx-fips, packer, reports-server, skaffold-fips, act, argocd-image-updater-fips, cilium-cli, mods, kargo, tflint-fips, commercial-grafana, guac, crossplane-provider-azure-network, frankenphp-8.4,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: drone, docker-cli-buildx-fips, packer, reports-server, skaffold-fips, act, argocd-image-updater-fips, cilium-cli, commercial-grafana, guac, frankenphp-8.4, tekton-pipelines-fips, mattermost, argo-cd-fips, docker, istio, prometheus, zarf-fips, buildkitd,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: drone, reports-server, skaffold-fips, argocd-image-updater-fips, cilium-cli, commercial-grafana, frankenphp-8.4, tekton-pipelines-fips, mattermost, argo-cd-fips, istio, prometheus, zarf-fips, flux-source-controller, traefik, opentofu-fips, knative-serving,...

CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-LS08172 Within HostnameError

Multiple security vulnerabilities affect the prometheus-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, kubeflow-katib, bom, falcoctl, policy-controller-fips, flux-helm-controller, goreleaser, ko-fips, helm, kots, datadog-agent, datadog-agent-fips, zot, cosign-fips, cadvisor, gitsign, kargo, guac, zarf, helm-operator, cosign, kubevela,...

CVE-2023-45286 vulnerabilities

Vulnerabilities for packages: rclone...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: bom, spire-server-fips, kpt, tekton-chains, k3s, scorecard, cert-manager, kubescape, up, falco, k3d, ctop, rancher-agent, skaffold, chartmuseum, falcoctl-fips, paranoia, aactl, slsa-verifier...