RATATOSKRATATOSK
Sign in

cert-manager

v1.18.5Security
Feb 2, 2026

ACTION 1OTHER 3

cert-manager v1.18.5 contains a security fix for `GHSA-gx3x-vq4p-mhhv` alongside other bug fixes. It also adds IPv6 HTTP-01 support and updates the Go toolchain.

Action needed (1)

  • securitymediumGHSA-gx3x-vq4p-mhhv denial-of-service fix

    cert-manager v1.18.5 fixes the denial-of-service issue identified by GHSA-gx3x-vq4p-mhhv. The release contains three bug fixes in total.

All 3 other recorded changesfixes 2 · value changes 1

fixes (2)

  • - Fixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. (#8414, @cert-manager-bot)
  • - Fixed an issue where HTTP-01 challenges failed when the Host header contains an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. (#8437, @cert-manager-bot)

value changes (1)

  • - Bump go to 1.24.12 (#8460, @SgtCoDFish)
Add cert-manager to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All cert-manager releases →