Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000288

sonatype-2026-000288

github.com/cert-manager/cert-manager - Improper Validation of Array Index [CVE-2026-25518]

Published Feb 3, 2026

https://github.com/advisories/GHSA-gx3x-vq4p-mhhv

CVSS ScoreHigh

8.2

Ecosystem	Package	Version


golang	github.com/cert-manager/cert-manager	v1.18.0-alpha.0
golang	github.com/cert-manager/cert-manager	v1.18.0-beta.0.0.20250731163618-236523b2c1b8
golang	github.com/cert-manager/cert-manager	v1.18.0-beta.0
golang	github.com/cert-manager/cert-manager	v1.18.0
golang	github.com/cert-manager/cert-manager	v1.18.1
golang	github.com/cert-manager/cert-manager	v1.18.2
golang	github.com/cert-manager/cert-manager	v1.18.3
golang	github.com/cert-manager/cert-manager	v1.18.4
golang	github.com/cert-manager/cert-manager	v1.19.0-alpha.0
golang	github.com/cert-manager/cert-manager	v1.19.0
golang	github.com/cert-manager/cert-manager	v1.19.1
golang	github.com/cert-manager/cert-manager	v1.19.2
golang	github.com/cert-manager/cert-manager	v1.20.0-alpha.0
golang	github.com/cert-manager/cert-manager	v1.20.0-alpha.1

sonatype-2026-000288 | Components Impacted | Sonatype Guide | Sonatype Guide