CLEANSTART-2026-YP46917 Security fixes in flux-image-reflector-controller-fips 1.1.2-r0

Package flux-image-reflector-controller-fips version 1.1.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, CVE-2026-29181...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: zitadel, kaf, snyk-cli, cert-manager, aactl, elastic-agent-fips, prometheus-operator, zot, prometheus-mongodb-exporter, kyverno, minio, spire-server, terraform, k3d, telegraf, backup-restore-operator, kine, prometheus, cilium, k3s, reports-server, flux, loki, nerdctl...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854. Spring Framework is used as part of our microservices. These vulnerabilities have been addressed. Please read the detai...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: hubble, chainloop-control-plane, envoy-ai-gateway, cluster-api-helm-controller-fips, hubble-ui, emissary, pulumi-kubernetes-operator, chainloop-cli-fips, fluent-operator, ocm-cli, rancher-support-bundle-kit, cass-operator-fips-no-pvc-delete,...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: aactl, helm, kine, cilium, kubernetes-dashboard, containerd, opentelemetry-collector, kubo, cert-manager, minio, kubernetes, kyverno, k3s, telegraf, fuse-overlayfs-snapshotter, kube-fluentd-operator, loki, runc, snyk-cli, kaf, flux, hubble, external-dns...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: aactl, helm, kine, cilium, kubernetes-dashboard, containerd, opentelemetry-collector, kubo, cert-manager, minio, kubernetes, kyverno, k3s, telegraf, fuse-overlayfs-snapshotter, kube-fluentd-operator, loki, runc, snyk-cli, kaf, flux, hubble, external-dns...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: hubble, kaf, prometheus-elasticsearch-exporter, kubo-fips, snyk-cli, cert-manager, aactl, kube-fluentd-operator, azure-aad-pod-identity-mic, external-dns, cilium-envoy-fips, kube-state-metrics, helm, kubernetes, prometheus-mongodb-exporter, kyverno, coder-fips, minio...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: hubble, kaf, prometheus-elasticsearch-exporter, kubo-fips, snyk-cli, cert-manager, aactl, kube-fluentd-operator, azure-aad-pod-identity-mic, external-dns, cilium-envoy-fips, kube-state-metrics, helm, kubernetes, prometheus-mongodb-exporter, kyverno, coder-fips, minio...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: hubble, dask-gateway, argo-workflows-fips, chainloop-cli-fips, dataplaneapi, ocm-cli, art, snyk-cli, frankenphp-8.4, atlantis-fips, mattermost, podman-fips, kube-fluentd-operator, elastic-agent-fips, cilium-envoy-fips, docker-fips, flux-source-watcher-fips,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: buildkitd, docker-cli-buildx, helm, grafana-operator, k8s-device-plugin, libnvidia-container, kine, melange, scorecard, dask-gateway, karpenter, kubernetes-dashboard, nerdctl, undock, containerd, dataplaneapi, src, timestamp-authority, pinact, cerbos, kubernetes,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: flux-source-controller, buildah, gitsign, zarf, aactl, podman, kots, ratify, kubescape, kyverno, skopeo, kyverno-notation-aws, slsa-verifier, witness, tekton-chains, falcoctl, undock...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, buildah, gitsign, zarf, aactl, podman, kots, ratify, kubescape, kyverno, skopeo, kyverno-notation-aws, slsa-verifier, witness, tekton-chains, falcoctl, undock...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kyverno-fips, slsa-verifier, chainctl, kubescape-server-fips, zarf, aactl, podman-fips, podman, tekton-chains, undock, falcoctl-fips, prometheus-podman-exporter, flux-source-controller, skopeo, zarf-fips, chainctl-fips, kyverno, tekton-chains-fips, falcoctl, buildah,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kyverno-fips, slsa-verifier, chainctl, kubescape-server-fips, zarf, aactl, podman-fips, podman, tekton-chains, undock, falcoctl-fips, prometheus-podman-exporter, flux-source-controller, skopeo, zarf-fips, chainctl-fips, kyverno, tekton-chains-fips, falcoctl, buildah,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: vitess, argo-cd, trivy, argo-workflows-fips, snyk-cli, frankenphp-8.4, knative-kafka-broker, rancher, mattermost, elastic-agent-fips, nemo, flux-source-controller, kubernetes, drone, prometheus-mongodb-exporter, commercial-grafana, etcd, cloudbeat-fips, k9s,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: vitess, argo-cd, trivy, argo-workflows-fips, snyk-cli, frankenphp-8.4, knative-kafka-broker, docker-machine-driver-harvester, rancher, mattermost, elastic-agent-fips, nemo, flux-source-controller, kubernetes, drone, prometheus-mongodb-exporter, commercial-grafana,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: vitess, argo-cd, trivy, juicefs, dagger, pulumi-kubernetes-operator, argo-workflows-fips, chainctl, chainloop-cli-fips, gitlab-runner-fips, snyk-cli, teleport-operator-fips, rootlesskit, gptscript, frankenphp-8.4, knative-kafka-broker, docker-machine-driver-harvester...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: vitess, argo-cd, trivy, juicefs, crossplane-provider-azure-purview, dagger, pulumi-kubernetes-operator, argo-workflows-fips, chainctl, chainloop-cli-fips, gitlab-runner-fips, slsa-verifier, snyk-cli, rootlesskit, teleport-operator-fips, gptscript, frankenphp-8.4,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: vitess, argo-cd, trivy, juicefs, crossplane-provider-azure-purview, dagger, pulumi-kubernetes-operator, argo-workflows-fips, chainctl, chainloop-cli-fips, gitlab-runner-fips, slsa-verifier, snyk-cli, rootlesskit, teleport-operator-fips, gptscript, frankenphp-8.4,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: argo-cd, teleport-operator-fips, chainloop-cli-fips, rootlesskit, gptscript, rancher, crossplane-provider-aws-acm-fips, amazon-ssm-agent, docker-fips, nemo, crossplane-provider-aws-cloudwatch, kubernetes, neuvector-sigstore-interface-fips, terraform-provider-azurerm,...