CLEANSTART-2026-HV28992 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3. See references for individual vulnerability details...

CLEANSTART-2026-QW16951 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-GC16599 Cancelling a query (e

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Cancelling a query e. See references for individual vulnerability details...

CLEANSTART-2026-XD92996 Cancelling a query (e

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. Cancelling a query e. See references for individual vulnerability details...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, cert-exporter, cert-manager-istio-csr, cert-manager-webhook-pdns, step-issuer...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-exporter, step-issuer, cert-exporter-fips, aws-privateca-issuer, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, cert-manager-istio-csr, cert-manager-webhook-pdns, cert-manager-cmctl, aws-privateca-issuer-fips, step-issuer-fips...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kubescape-operator, timestamp-authority, kubernetes-csi-livenessprobe, sigstore-scaffolding, pguser, helm-push, crane, amass, mkcert, renovate, hey, gobump, litefs, restic, hivemind, petname, age, kpt, tofu-controller, incert, docker-credential-gcr, kustomize, xcaddy...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: kubescape-operator, timestamp-authority, kubernetes-csi-livenessprobe, sigstore-scaffolding, pguser, helm-push, crane, amass, mkcert, renovate, hey, gobump, litefs, restic, hivemind, petname, age, kpt, tofu-controller, incert, docker-credential-gcr, kustomize, xcaddy...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: kubescape-operator, timestamp-authority, kubernetes-csi-livenessprobe, sigstore-scaffolding, pguser, helm-push, crane, amass, mkcert, renovate, hey, restic, litefs, hivemind, petname, age, kpt, tofu-controller, incert, docker-credential-gcr, kustomize, xcaddy,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: kubescape-operator, timestamp-authority, sigstore-scaffolding, pguser, helm-push, crane, amass, mkcert, renovate, hey, gobump, litefs, restic, hivemind, petname, age, kpt, tofu-controller, incert, docker-credential-gcr, kustomize, xcaddy, mongo-tools, pvc-autoresizer...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: kubescape-operator, timestamp-authority, kubernetes-csi-livenessprobe, sigstore-scaffolding, pguser, helm-push, crane, amass, renovate, hey, gobump, litefs, restic, hivemind, petname, age, kpt, tofu-controller, incert, docker-credential-gcr, kustomize, xcaddy,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: kubescape-operator, timestamp-authority, kubernetes-csi-livenessprobe, sigstore-scaffolding, pguser, helm-push, crane, amass, mkcert, renovate, hey, gobump, litefs, restic, hivemind, petname, age, kpt, tofu-controller, incert, docker-credential-gcr, kustomize, xcaddy...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: kubescape-operator, timestamp-authority, sigstore-scaffolding, pguser, helm-push, crane, amass, mkcert, renovate, hey, gobump, litefs, restic, hivemind, petname, age, kpt, tofu-controller, incert, docker-credential-gcr, kustomize, xcaddy, mongo-tools, pvc-autoresizer...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: kubescape-operator, timestamp-authority, kubernetes-csi-livenessprobe, sigstore-scaffolding, pguser, helm-push, crane, amass, mkcert, renovate, hey, gobump, litefs, restic, hivemind, petname, age, kpt, tofu-controller, incert, docker-credential-gcr, kustomize, xcaddy...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: kubescape-operator, timestamp-authority, kubernetes-csi-livenessprobe, sigstore-scaffolding, pguser, helm-push, crane, amass, mkcert, renovate, hey, gobump, litefs, restic, hivemind, petname, age, kpt, tofu-controller, incert, docker-credential-gcr, kustomize, xcaddy...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: kubescape-operator, timestamp-authority, kubernetes-csi-livenessprobe, sigstore-scaffolding, pguser, helm-push, crane, amass, mkcert, renovate, hey, gobump, litefs, restic, hivemind, petname, age, kpt, tofu-controller, incert, docker-credential-gcr, kustomize, xcaddy...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, kyverno-policy-reporter-plugins-trivy-fips, helm-set-status, authservice-fips, vitess, cilium-certgen, crossplane-function-go-templating-fips, juicefs, k3d, dockerize-fips, prometheus-elasticsearch-exporter, delve, s5cmd,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, kyverno-policy-reporter-plugins-trivy-fips, helm-set-status, authservice-fips, vitess, cilium-certgen, crossplane-function-go-templating-fips, juicefs, k3d, dockerize-fips, prometheus-elasticsearch-exporter, delve, s5cmd,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, kyverno-policy-reporter-plugins-trivy-fips, helm-set-status, authservice-fips, vitess, cilium-certgen, crossplane-function-go-templating-fips, juicefs, k3d, dockerize-fips, prometheus-elasticsearch-exporter, delve, s5cmd,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: hivemind, age, docker-credential-gcr, flannel, wgcf, git-sync, pdfcpu, tflint, capslock, nri-nginx, timoni, vertical-pod-autoscaler, atlantis, q, vault-k8s, docker-compose, aws-application-networking-k8s, memcached-exporter, kube-metrics-adapter, stakater-reloader,...