CLEANSTART-2026-QK89502 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the vault-k8s package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CLEANSTART-2026-KP10631 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the vault-k8s package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for...

CLEANSTART-2026-RE83921 Previously, a channel registered in the mux's chanList is not usable until it is established

Multiple security vulnerabilities affect the vault-k8s package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, terraform-docs, podinfo, crossplane-provider-aws-kms, wuzz, aws-node-termination-handler, crossplane-provider-aws-rds, crossplane-provider-aws-sqs, gomplate, kubeflow-pipelines, knative-serving, kubevela, nri-prometheus,...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, terraform-docs, podinfo, crossplane-provider-aws-kms, wuzz, aws-node-termination-handler, crossplane-provider-aws-rds, crossplane-provider-aws-sqs, gomplate, kubeflow-pipelines, knative-serving, kubevela, nri-prometheus,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: minio-object-browser, helm-set-status, aws-sigv4-proxy, podinfo, terraform-docs, wuzz, crossplane-provider-aws-rds, sftpgo-plugin-pubsub, kubeflow-pipelines, gptscript, ghaudit, go-licenses, kubernetes-csi-external-attacher, restic, wave, harbor-registry, wgcf, src,...

CLEANSTART-2026-GS57944 Security fixes in vault-k8s-fips 1.7.5-r1

Package vault-k8s-fips version 1.7.5-r1 fixes 1 vulnerabilities: CVE-2026-39822...

CLEANSTART-2026-FE65207 Security fixes in vault-k8s-fips 1.4.2-r0

Package vault-k8s-fips version 1.4.2-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...

CLEANSTART-2026-IC30001 Security fixes in vault-k8s-fips 1.7.0-r0

Package vault-k8s-fips version 1.7.0-r0 fixes 2 vulnerabilities: ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-BP68746 Security fixes in vault-k8s-fips 1.5.0-r0

Package vault-k8s-fips version 1.5.0-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...

CLEANSTART-2026-UY85485 Within HostnameError

Multiple security vulnerabilities affect the vault-k8s package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2025-CN65903 Security fixes for GHSA-6v2p-p543-phr9, GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.5.0-r0, 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-EU07511 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0

Multiple security vulnerabilities affect the vault-k8s package. These issues are resolved in later releases. See references for individual CVE details...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, vault-k8s, rancher-machine, sftpgo-plugin-pubsub, secrets-store-csi-driver-provider-aws, hivemind, dagdotdev, vault-benchmark, bank-vaults, vexctl, terraform-provider-time, nats, custom-pod-autoscaler-operator, addon-resizer, blobfuse2, git-lfs,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: newrelic-nri-statsd, nvidia-nsight-compute-13.2, kube-logging-operator-custom-runner-fips, lvm-driver, octo-sts, secrets-store-csi-driver-fips, prometheus-nats-exporter, docker-credential-ecr-login, wazero-fips, memcached-exporter-fips, karpenter-fips, nemo, vault-k8...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: newrelic-nri-statsd, nvidia-nsight-compute-13.2, kube-logging-operator-custom-runner-fips, lvm-driver, octo-sts, secrets-store-csi-driver-fips, prometheus-nats-exporter, docker-credential-ecr-login, wazero-fips, memcached-exporter-fips, karpenter-fips, nemo, vault-k8...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, terraform-docs, gops, supercronic, gomplate, chartmuseum, kubeflow-pipelines, kubevela, envoy-ratelimit, go-licenses, nri-prometheus, sbom-scorecard, direnv, src, hello-world-golang, k8sgpt, stakater-reloader, thanos-operator, kor,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: terraform-docs, crossplane-provider-aws-kms, crossplane-provider-aws-rds, chartmuseum, crossplane-provider-aws-sqs, docker-compose, crossplane-provider-aws-eks, distribution, go-licenses, gomplate, gptscript, kubeflow-pipelines, restic, seaweedfs, sqlexporter,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: cue, flux, prometheus-pushgateway, chartmuseum, weaviate, aws-efs-csi-driver-fips, nri-prometheus, minio, prometheus-elasticsearch-exporter-fips, vault-csi-provider, trillian, cosign, aws-load-balancer-controller-fips, kubernetes-ingress-defaultbackend, kind,...