CLEANSTART-2026-TR09708 Security fix for GHSA-8wmf-6v46-5gfg applied in: rabbitmq-cluster-operator 2.21.1-r6

Security vulnerability affects the rabbitmq-cluster-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-105253

Security vulnerability affects the rabbitmq-cluster-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LX31883 Security fix for GHSA-gx3x-vq4p-mhhv applied in: cert-manager-cmctl 2.3.0-r1, cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1

GHSA-gx3x-vq4p-mhhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OJ21892 Security fix for CVE-2026-25518 applied in: cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, step-issuer 0.9.11-r1

CVE-2026-25518 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-55225 Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.entityOperator watchedNamespace to a target namespace, causing the Cluster...

CVE-2026-55225: Improper Privilege Management

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.entityOperator watchedNamespace to a target namespace, causing the Cluster...

CLEANSTART-2026-CT24188 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CLEANSTART-2026-XP64749 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CLEANSTART-2026-CW06250 Security fixes in rabbitmq-cluster-operator 2.22.4-r0

Package rabbitmq-cluster-operator version 2.22.4-r0 fixes 8 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer-fips, cert-manager-istio-csr-fips, cert-manager-csi-driver-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, cert-manager-webhook-pdns-fips, cert-manager-openshift-routes-fips, percona-server-mongodb-operator-fips,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, volume-modifier-for-k8s, sigstore-scaffolding, crossplane-provider-family-azure, slsa-verifier, redka, crossplane-provider-aws-sqs, dbmate, flyte, pulumi-kubernetes-operator, conjur-cli, crossplane-provider-aws-cloudfront, flannel,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, volume-modifier-for-k8s, minio-operator, kapp, slsa-verifier, mods, kubernetes-dashboard, lazygit, redka, gptscript, sftpgo-plugin-kms, bom, dbmate, chart-testing, conjur-cli, crossplane-provider-aws-cloudfront, docker-credential-gcr, flannel, git-lfs...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kapp, kubernetes-dashboard, gptscript, bom, chart-testing, docker-credential-gcr, rancher-system-agent, opentofu, nri-haproxy, azure-service-operator, aws-application-networking-k8s, docker-cli, steampipe, gobuster, opa, dex, regclient, migrate,...

CLEANSTART-2026-RR36029 Security fixes in rabbitmq-cluster-operator 2.22.3-r1

Package rabbitmq-cluster-operator version 2.22.3-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-TQ91527 Security fixes in rabbitmq-cluster-operator 2.22.2-r1

Package rabbitmq-cluster-operator version 2.22.2-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-KH47666 Security fixes in rabbitmq-cluster-operator 2.20.1-r2

Package rabbitmq-cluster-operator version 2.20.1-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-KV79736 Security fixes in rabbitmq-cluster-operator 2.19.2-r5

Package rabbitmq-cluster-operator version 2.19.2-r5 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-JH58226 Security fixes in rabbitmq-cluster-operator 2.21.0-r0

Package rabbitmq-cluster-operator version 2.21.0-r0 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-GF75739 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r5

Package percona-xtradb-cluster-operator-fips version 1.18.0-r5 fixes 9 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-42506, CVE-2026-42502...

CLEANSTART-2026-EZ87718 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r1

Package percona-xtradb-cluster-operator-fips version 1.18.0-r1 fixes 8 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119...