GO-2026-6094 vulnerabilities

Vulnerabilities for packages: vcluster, cloud-provider-azure, cluster-api-provider-vsphere, tekton-pipelines, rke2-cloud-provider, apisix-ingress-controller, external-secrets-operator, spicedb-operator, gitlab-kas, cass-operator, kubernetes-csi-external-provisioner, spqr, k3s, cert-manager,...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, cert-exporter, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, step-issuer, cert-manager-webhook-pdns, cert-exporter-fips, cert-manager-istio-csr, aws-privateca-issuer, aws-privateca-issuer-fips, cert-manager-cmctl...

CLEANSTART-2026-IL84688 Security fixes in cert-manager-webhook-pdns-fips 2.5.5-r1

Package cert-manager-webhook-pdns-fips version 2.5.5-r1 fixes 29 vulnerabilities: CVE-2026-39822, CVE-2026-42505, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830...

CLEANSTART-2026-EP15881 Security fixes in cert-manager-webhook-pdns-fips 2.3.0-r0

Package cert-manager-webhook-pdns-fips version 2.3.0-r0 fixes 17 vulnerabilities: CVE-2022-1996, CVE-2023-45142, CVE-2023-25151, CVE-2022-21698, CVE-2022-30636...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver-fips, redpanda-operator, cert-manager-istio-csr, athenz-cert-manager-issuer-fips, percona-xtradb-cluster-operator-fips, aws-privateca-issuer-fips, step-issuer-fips, step-issuer, cert-manager-openshift-routes-fips, mariadb-operator,...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: vcluster, cloud-provider-azure, prometheus, spire-server, newrelic-nri-kube-events, snyk-cli, docker-machine-driver-harvester, amazon-cloudwatch-agent-operator, authservice, crossplane-provider-aws-ec2, nova, temporal, cluster-proportional-autoscaler,...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: vcluster, cloud-provider-azure, prometheus, spire-server, osv-scanner, aws-flb-cloudwatch, newrelic-nri-kube-events, snyk-cli, xeol, docker-machine-driver-harvester, step-ca, amazon-cloudwatch-agent-operator, authservice, crossplane-provider-aws-ec2, knative-serving,...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: vcluster, cloud-provider-azure, prometheus, spire-server, osv-scanner, aws-flb-cloudwatch, newrelic-nri-kube-events, snyk-cli, xeol, docker-machine-driver-harvester, step-ca, amazon-cloudwatch-agent-operator, authservice, crossplane-provider-aws-ec2, knative-serving,...

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: vcluster, cloud-provider-azure, prometheus, spire-server, osv-scanner, aws-flb-cloudwatch, newrelic-nri-kube-events, snyk-cli, xeol, docker-machine-driver-harvester, step-ca, amazon-cloudwatch-agent-operator, authservice, crossplane-provider-aws-ec2, knative-serving,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, k8s-agents-operator, crossplane-provider-aws-sagemaker, gpu-operator-fips, hubble-ui, omnictl-multiarch-fips, beats-fips, crossplane-provider-azure-spring, nrdot-collector-fips, crossplane-provider-aws-dynamodb-fips, verticadb-operator-fips,...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, k8s-agents-operator, crossplane-provider-aws-sagemaker, gpu-operator-fips, hubble-ui, omnictl-multiarch-fips, beats-fips, crossplane-provider-azure-spring, nrdot-collector-fips, crossplane-provider-aws-dynamodb-fips, verticadb-operator-fips,...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, nri-elasticsearch, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, hubble-ui, omnictl-multiarch-fips, beats-fips, crossplane-provider-azure-spring,...

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, nri-elasticsearch, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, hubble-ui, omnictl-multiarch-fips, beats-fips, crossplane-provider-azure-spring,...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, nri-elasticsearch, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, hubble-ui, omnictl-multiarch-fips, beats-fips, crossplane-provider-azure-spring,...

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, nri-elasticsearch, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, hubble-ui, omnictl-multiarch-fips, beats-fips, crossplane-provider-azure-spring,...

CLEANSTART-2026-EI06494 Security fixes for CVE-2025-4673, CVE-2025-47907, CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-6vp2-p543-phr9, ghsa-9h8m-3fm2-qjrq, ghsa-cxp5-9wg8-vx66, ghsa-hcp3-c754-cr77, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-vugc-356p-c3xw applied in versions: 3.2.3-r0, 3.2.3-r1, 3.2.3-r2

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BY59711 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, percona-xtradb-cluster-operator-fips, aws-privateca-issuer-fips, step-issuer-fips, step-issuer, cert-manager-openshift-routes-fips, mariadb-operator, cert-manager-cmctl-fips, cert-manager-google-cas-issuer-fips,...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, step-issuer, mariadb-operator, opentelemetry-operator, cert-manager-webhook-pdns, aws-privateca-issuer, cert-manager-cmctl, cert-manager-istio-csr, cert-manager-csi-driver...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, percona-xtradb-cluster-operator-fips, aws-privateca-issuer-fips, step-issuer-fips, step-issuer, cert-manager-openshift-routes-fips, mariadb-operator, cert-manager-cmctl-fips, cert-manager-google-cas-issuer-fips,...