32 matches found
GO-2026-6610 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, metrics-server-fips, redis-operator, kyverno-policy-reporter-plugins-trivy, knative-serving, certificate-transparency-fips, crossplane-provider-aws-identitystore-fips, tempo-fips, git-sync-fips, longhorn-cli-fips,...
CVE-2026-78669 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, metrics-server-fips, redis-operator, kyverno-policy-reporter-plugins-trivy, neuvector-scanner-fips, knative-serving, certificate-transparency-fips, crossplane-provider-aws-identitystore-fips, tempo-fips, git-sync-fips,...
GO-2026-6611 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, metrics-server-fips, redis-operator, kyverno-policy-reporter-plugins-trivy, neuvector-scanner-fips, knative-serving, certificate-transparency-fips, crossplane-provider-aws-identitystore-fips, tempo-fips, git-sync-fips,...
GO-2026-6610 vulnerabilities
Vulnerabilities for packages: falcoctl, cluster-api-gcp-controller, apko, cluster-api-helm-controller, grafana-pyroscope, grafana-mimir, crossplane-provider-aws-sns, trufflehog, amazon-cloudwatch-agent, kubernetes-dashboard-metrics-scraper, restic, custom-pod-autoscaler,...
CVE-2026-78660 vulnerabilities
Vulnerabilities for packages: falcoctl, cluster-api-gcp-controller, apko, cluster-api-helm-controller, grafana-pyroscope, grafana-mimir, crossplane-provider-aws-sns, trufflehog, amazon-cloudwatch-agent, kubernetes-dashboard-metrics-scraper, restic, custom-pod-autoscaler,...
CVE-2026-78669 vulnerabilities
Vulnerabilities for packages: falcoctl, cluster-api-gcp-controller, kubo, apko, cluster-api-helm-controller, grafana-pyroscope, grafana-mimir, crossplane-provider-aws-sns, trufflehog, amazon-cloudwatch-agent, kubernetes-dashboard-metrics-scraper, restic, custom-pod-autoscaler, amass,...
GO-2026-6611 vulnerabilities
Vulnerabilities for packages: falcoctl, cluster-api-gcp-controller, kubo, apko, cluster-api-helm-controller, grafana-pyroscope, grafana-mimir, crossplane-provider-aws-sns, trufflehog, amazon-cloudwatch-agent, kubernetes-dashboard-metrics-scraper, restic, custom-pod-autoscaler, amass,...
CLEANSTART-2026-QK89502 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the vault-k8s package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-KP10631 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Multiple security vulnerabilities affect the vault-k8s package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for...
CLEANSTART-2026-RE83921 Previously, a channel registered in the mux's chanList is not usable until it is established
Multiple security vulnerabilities affect the vault-k8s package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: opentofu, kubo, cluster-api, kube-fluentd-operator, azure-workload-identity-webhook, cloud-sql-proxy, dask-gateway, chisel, amazon-k8s-cni, continuity, istio, crossplane-provider-aws-lambda, cluster-api-helm-controller, nfs-subdir-external-provisioner, grafana-mimir,...
GO-2026-5037 vulnerabilities
Vulnerabilities for packages: opentofu, kubo, cluster-api, kube-fluentd-operator, azure-workload-identity-webhook, cloud-sql-proxy, dask-gateway, chisel, amazon-k8s-cni, continuity, istio, crossplane-provider-aws-lambda, cluster-api-helm-controller, nfs-subdir-external-provisioner, grafana-mimir,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, cluster-api-gcp-controller, kubo, opentofu, azure-workload-identity-webhook, dask-gateway, redka, chisel, osv-scanner, nfs-subdir-external-provisioner, crossplane-provider-aws-lambda, azure-service-operator,...
CLEANSTART-2026-GS57944 Security fixes in vault-k8s-fips 1.7.5-r1
Package vault-k8s-fips version 1.7.5-r1 fixes 1 vulnerabilities: CVE-2026-39822...
CLEANSTART-2026-IC30001 Security fixes in vault-k8s-fips 1.7.0-r0
Package vault-k8s-fips version 1.7.0-r0 fixes 2 vulnerabilities: ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw...
CLEANSTART-2026-BP68746 Security fixes in vault-k8s-fips 1.5.0-r0
Package vault-k8s-fips version 1.5.0-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...
CLEANSTART-2026-FE65207 Security fixes in vault-k8s-fips 1.4.2-r0
Package vault-k8s-fips version 1.4.2-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...
PT-2026-85832
Package vault-k8s-fips version 1.5.0-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...