CLEANSTART-2026-BZ08231 Security fix for CVE-2026-6790 applied in: apache-hive 4.0.1-r8, apache-nifi 2.10.0-r3, apache-zookeeper 3.9.5-r8, cassandra-reaper-fips 3.8.0-r9, cassandra-reaper-fips 4.0.2-r3, cassandra-reaper-fips 4.1.1-r1, solr 10.0.0-r6, strimzi-kafka-operator 1.1.0-r2, trino 480-r10, trino 483-r1

CVE-2026-6790 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GL17744 Security fix for ghsa-mf24-chxh-hmvj applied in: tigera-operator-fips 1.37.2-r0

Security vulnerability affects the tigera-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DL05775 Security fix for CVE-2025-25294 applied in: tigera-operator-fips 1.37.2-r5

Security vulnerability affects the tigera-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JF82480 Security fix for ghsa-7p3p-8qv8-m2vh applied in: strimzi-kafka-operator 1.1.0-r2, trino 483-r1

ghsa-7p3p-8qv8-m2vh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QJ10298 Security fix for ghsa-f4v5-65jj-pcr2 applied in: strimzi-kafka-operator 1.1.0-r2, trino 483-r1

ghsa-f4v5-65jj-pcr2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NR68186 Security fix for ghsa-hpcc-26xq-25fv applied in: strimzi-kafka-operator 1.1.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ET24110 Security fix for CVE-2026-56816 applied in: strimzi-kafka-operator 1.1.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PP41562 Security fix for CVE-2026-61625 applied in: victoriametrics-operator 0.71.0-r3

Security vulnerability affects the victoriametrics-operator package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-75961 NEX-Forms <= 9.3.0 - Authenticated (Administrator+) SQL Injection via 'operator' Key of the 'additional_params' Parameter

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additionalparams' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CLEANSTART-2026-UZ24502 norm

Multiple security vulnerabilities affect the eck-operator package. A norm. See references for individual vulnerability details...

CLEANSTART-2026-PM97219 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-YQ30478 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

CLEANSTART-2026-VK86621 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

PT-2026-102178

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101253

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100595

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101880

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102263

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102204

Security vulnerability affects the helm-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101853

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...