37 matches found
CVE-2026-62290 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer-fips, cert-manager-openshift-routes, mariadb-operator-fips, athenz-cert-manager-issuer-fips, cert-manager-google-cas-issuer, step-issuer, aws-privateca-issuer,...
GHSA-H524-452V-82P9 vulnerabilities
Vulnerabilities for packages: kubescape-operator, crossplane, timoni, gitlab-runner, aws-efs-csi-driver, kubernetes-event-exporter, spark-operator, prometheus, crossplane-provider-aws-elasticache, rancher, tigera-operator, telegraf, kubernetes-csi-external-snapshotter, redpanda, cortex,...
CVE-2026-27145 vulnerabilities
Vulnerabilities for packages: kubescape-operator, crossplane, timoni, nri-apache, kuma, temporal-ui-server, gitlab-runner, aws-efs-csi-driver, kubernetes-event-exporter, guac, spark-operator, prometheus, crossplane-provider-aws-elasticache, nri-haproxy, rancher, nri-couchbase, tigera-operator,...
GHSA-H3GM-Q7M7-MP28 vulnerabilities
Vulnerabilities for packages: kubescape-operator, crossplane, timoni, nri-apache, kuma, temporal-ui-server, gitlab-runner, aws-efs-csi-driver, kubernetes-event-exporter, guac, spark-operator, prometheus, crossplane-provider-aws-elasticache, nri-haproxy, rancher, nri-couchbase, tigera-operator,...
GHSA-4279-Q6MJ-392R vulnerabilities
Vulnerabilities for packages: kubescape-operator, crossplane, timoni, nri-apache, kuma, temporal-ui-server, gitlab-runner, aws-efs-csi-driver, kubernetes-event-exporter, guac, spark-operator, prometheus, crossplane-provider-aws-elasticache, nri-haproxy, rancher, nri-couchbase, tigera-operator,...
CVE-2026-42504 vulnerabilities
Vulnerabilities for packages: cilium-certgen-fips, k8s-image-swapper-fips, cilium-fips, crossplane-provider-aws-route53recoverycontrolconfig, peerdb-flow, crossplane, external-dns-fips, flux-source-controller-fips, trivy-fips, crossplane-provider-keycloak-fips, cluster-api-helm-controller,...
GHSA-H524-452V-82P9 vulnerabilities
Vulnerabilities for packages: cilium-certgen-fips, k8s-image-swapper-fips, cilium-fips, crossplane-provider-aws-route53recoverycontrolconfig, peerdb-flow, crossplane, external-dns-fips, flux-source-controller-fips, trivy-fips, crossplane-provider-keycloak-fips, cluster-api-helm-controller,...
CVE-2026-27145 vulnerabilities
Vulnerabilities for packages: cilium-certgen-fips, jitsucom-bulker, k8s-image-swapper-fips, mc-fips, cilium-fips, crossplane-provider-aws-route53recoverycontrolconfig, kuma, peerdb-flow, chisel, crossplane, kubeflow, external-dns-fips, flux-source-controller-fips, trivy-fips,...
GHSA-H3GM-Q7M7-MP28 vulnerabilities
Vulnerabilities for packages: cilium-certgen-fips, jitsucom-bulker, k8s-image-swapper-fips, mc-fips, cilium-fips, crossplane-provider-aws-route53recoverycontrolconfig, kuma, peerdb-flow, chisel, crossplane, kubeflow, external-dns-fips, flux-source-controller-fips, trivy-fips,...
CVE-2026-42507 vulnerabilities
Vulnerabilities for packages: cilium-certgen-fips, jitsucom-bulker, k8s-image-swapper-fips, mc-fips, cilium-fips, crossplane-provider-aws-route53recoverycontrolconfig, kuma, peerdb-flow, chisel, crossplane, kubeflow, external-dns-fips, flux-source-controller-fips, trivy-fips,...
GHSA-4279-Q6MJ-392R vulnerabilities
Vulnerabilities for packages: cilium-certgen-fips, jitsucom-bulker, k8s-image-swapper-fips, mc-fips, cilium-fips, crossplane-provider-aws-route53recoverycontrolconfig, kuma, peerdb-flow, chisel, crossplane, kubeflow, external-dns-fips, flux-source-controller-fips, trivy-fips,...
CLEANSTART-2026-EI06494 Security fixes for CVE-2025-4673, CVE-2025-47907, CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-6vp2-p543-phr9, ghsa-9h8m-3fm2-qjrq, ghsa-cxp5-9wg8-vx66, ghsa-hcp3-c754-cr77, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-vugc-356p-c3xw applied in versions: 3.2.3-r0, 3.2.3-r1, 3.2.3-r2
Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-BY59711 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer-fips, opentelemetry-operator, cert-manager-openshift-routes, mariadb-operator-fips, cert-manager-google-cas-issuer, step-issuer, aws-privateca-issuer,...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: mariadb-operator, step-issuer, cert-manager-istio-csr, cert-manager-cmctl, aws-privateca-issuer, percona-server-mongodb-operator, opentelemetry-operator, cert-manager-csi-driver, cert-manager-webhook-pdns...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer-fips, opentelemetry-operator, cert-manager-openshift-routes, mariadb-operator-fips, cert-manager-google-cas-issuer, step-issuer, aws-privateca-issuer,...
CLEANSTART-2026-HV28992 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3
Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3. See references for individual vulnerability details...
CLEANSTART-2026-QW16951 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...