CLEANSTART-2026-BN98240 Security fixes in fluent-operator-fips 3.3.0-r7

Package fluent-operator-fips version 3.3.0-r7 fixes 4 vulnerabilities: CVE-2026-27139, CVE-2025-61730, CVE-2026-27142, CVE-2025-61728...

CLEANSTART-2026-YG84759 Security fixes in prometheus-mysqld-exporter 0.18.0-r1

Package prometheus-mysqld-exporter version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-26958...

CLEANSTART-2026-JV70419 Security fixes in loki 3.6.12-r0

Package loki version 3.6.12-r0 fixes 4 vulnerabilities: CVE-2020-8911, CVE-2020-8912, CVE-2026-56852, CVE-2026-46600...

CLEANSTART-2026-UV81951 Security fixes in k8ssandra-client-fips 0.8.8-r0

Package k8ssandra-client-fips version 0.8.8-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-II62284 Security fixes in k8ssandra-operator-fips 1.29.0-r1

Package k8ssandra-operator-fips version 1.29.0-r1 fixes 34 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186, CVE-2026-25679, CVE-2026-39820, CVE-2025-61726...

CLEANSTART-2026-HO81161 Security fixes in apache-nifi 2.8.0-r0

Package apache-nifi version 2.8.0-r0 fixes 4 vulnerabilities: ghsa-x2wq-9x2f-fhj7, ghsa-72hv-8253-57qq, ghsa-6v53-7c9g-w56r, ghsa-2m67-wjpj-xhg9...

CLEANSTART-2026-AW13748 Security fixes in ingress-nginx-controller-1.15 1.15.1-r3

Package ingress-nginx-controller-1.15 version 1.15.1-r3 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-IP64122 Security fixes in harbor-fips 2.14.2-r2

Package harbor-fips version 2.14.2-r2 fixes 4 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-25679, CVE-2026-33186...

CLEANSTART-2026-MJ21228 Security fixes in harbor 2.13.4-r2

Package harbor version 2.13.4-r2 fixes 7 vulnerabilities: CVE-2025-55198, CVE-2025-55199, CVE-2026-27141, CVE-2025-53547, ghsa-f9f8-9pmf-xv68...

CLEANSTART-2026-XV94605 Security fixes in step-issuer 0.12.0-r0

Package step-issuer version 0.12.0-r0 fixes 4 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-UC75488 Security fixes in apko 1.2.13-r0

Package apko version 1.2.13-r0 fixes 24 vulnerabilities: ghsa-crhj-59gh-8x96, ghsa-m7cr-m3pv-hgrp, ghsa-w5pp-99ch-qj29, CVE-2026-45570, CVE-2026-45571...

CLEANSTART-2026-QF38709 Security fixes in nri-kubernetes 4.0.0-r0

Package nri-kubernetes version 4.0.0-r0 fixes 4 vulnerabilities: CVE-2026-33811, CVE-2026-39820, CVE-2026-27136, CVE-2026-33814...

CLEANSTART-2026-BG62788 Security fixes in expat 2.4.3-r0

Package expat version 2.4.3-r0 fixes 8 vulnerabilities: CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824...

CLEANSTART-2026-JZ16335 Security fixes in keycloak 26.6.4-r2

Package keycloak version 26.6.4-r2 fixes 4 vulnerabilities: ghsa-r7wm-3cxj-wff9, CVE-2026-55851, CVE-2026-59919, CVE-2026-55831...

CLEANSTART-2026-MR10520 Security fixes in tensorflow-gpu-jupyter 2.20.0-r1

Package tensorflow-gpu-jupyter version 2.20.0-r1 fixes 4 vulnerabilities: CVE-2026-25645, CVE-2026-59884, CVE-2026-59885, CVE-2026-59886...

CLEANSTART-2026-CF04013 Security fixes in kubernetes 1.35.3-r0

Package kubernetes version 1.35.3-r0 fixes 4 vulnerabilities: CVE-2026-24051, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3...

ALPINE-CVE-2026-58040

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...

ALPINE-CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

UBUNTU-CVE-2026-58040

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...