CLEANSTART-2026-QK89502 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the vault-k8s package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CLEANSTART-2026-KP10631 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the vault-k8s package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, crossplane-provider-aws-sns, ksops, coredns, cloud-provider-azure, neuvector-dbgen, act, controller-gen, atlantis, nri-prometheus, redpanda, terraform-provider-grafana, speedtest-go, gomplate, kyverno, spqr, chisel, grafana-alloy,...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, crossplane-provider-aws-sns, ksops, coredns, cloud-provider-azure, neuvector-dbgen, act, controller-gen, atlantis, nri-prometheus, redpanda, terraform-provider-grafana, speedtest-go, gomplate, kyverno, spqr, chisel, grafana-alloy,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, crossplane-provider-aws-sns, headlamp, ksops, kubelet-csr-approver, flux-notification-controller, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, x509-certificate-exporter, crossplane-provider-aws-cloudwatchlogs,...

CLEANSTART-2026-GS57944 Security fixes in vault-k8s-fips 1.7.5-r1

Package vault-k8s-fips version 1.7.5-r1 fixes 1 vulnerabilities: CVE-2026-39822...

CLEANSTART-2026-FE65207 Security fixes in vault-k8s-fips 1.4.2-r0

Package vault-k8s-fips version 1.4.2-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...

CLEANSTART-2026-IC30001 Security fixes in vault-k8s-fips 1.7.0-r0

Package vault-k8s-fips version 1.7.0-r0 fixes 2 vulnerabilities: ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-BP68746 Security fixes in vault-k8s-fips 1.5.0-r0

Package vault-k8s-fips version 1.5.0-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...

CLEANSTART-2026-UY85485 Within HostnameError

Multiple security vulnerabilities affect the vault-k8s package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2025-CN65903 Security fixes for GHSA-6v2p-p543-phr9, GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.5.0-r0, 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

CLEANSTART-2025-EU07511 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0

Multiple security vulnerabilities affect the vault-k8s package. These issues are resolved in later releases. See references for individual CVE details...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: vault-k8s, terraform-provider-time, confluent-common-docker, newrelic-nri-statsd, kserve-rest-proxy, secrets-store-csi-driver-provider-aws, mongodb-kubernetes-operator, pvc-autoresizer, rancher-machine, sftpgo-plugin-pubsub, git-lfs, container-object-storage-interfac...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: prometheus-process-exporter, stakater-reloader, mattmoor-chainit, octo-sts, gcp-compute-persistent-disk-csi-driver-fips, blob-csi-fips, karpenter-fips, blobfuse2, karma-fips, prometheus-adapter, nvidia-nsight-compute-12.8, vault-benchmark, eks-distro-fips, nemo,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: prometheus-process-exporter, stakater-reloader, mattmoor-chainit, octo-sts, gcp-compute-persistent-disk-csi-driver-fips, blob-csi-fips, karpenter-fips, blobfuse2, karma-fips, prometheus-adapter, nvidia-nsight-compute-12.8, vault-benchmark, eks-distro-fips, nemo,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, nri-prometheus, envoy-ratelimit, controller-gen, prometheus-operator, speedtest-go, nerdctl, gomplate, helm-operator, docker-credential-gcr, aws-flb-firehose, kubevela, newrelic-infrastructure-agent, kube-state-metrics, dagger,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, crossplane-provider-aws-sns, ksops, terraform-provider-aws, flux-notification-controller, atlantis, prometheus-operator, restic, nerdctl, gomplate, chezmoi, spqr, k6, x509-certificate-exporter, syft, grafana-alloy,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: falcoctl, wavefront-collector-for-kubernetes, trillian, kubescape, secrets-store-csi-driver-provider-gcp, kubernetes-ingress-defaultbackend, kubernetes-dashboard, kubernetes-csi-livenessprobe-fips, kaf, stakater-reloader, metacontroller, trust-manager,...