CLEANSTART-2026-BM38174 Security fixes in istio 1.28.5-r2

Package istio version 1.28.5-r2 fixes 2 vulnerabilities: CVE-2025-15558, ghsa-p436-gjf2-799p...

CLEANSTART-2026-EW36708 Security fixes in istio-fips 1.28.3-r1

Package istio-fips version 1.28.3-r1 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-OG41205 Security fixes in istio 1.30.3-r0

Package istio version 1.30.3-r0 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-HY07674 Security fixes in istio-operator-fips 1.25.5-r0

Package istio-operator-fips version 1.25.5-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-VT81604 Security fixes in istio-fips 1.28.4-r2

Package istio-fips version 1.28.4-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-CF28575 Security fixes in istio 1.28.7-r1

Package istio version 1.28.7-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-YO86150 Security fixes in istio-fips 1.25.5-r0

Package istio-fips version 1.25.5-r0 fixes 3 vulnerabilities: CVE-2025-47913, CVE-2025-58181, CVE-2025-47914...

CLEANSTART-2026-MR94464 Security fixes in istio 1.27.9-r1

Package istio version 1.27.9-r1 fixes 4 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-39821, CVE-2026-25680...

CLEANSTART-2026-JP93975 Security fixes in istio-fips 1.29.2-r0

Package istio-fips version 1.29.2-r0 fixes 2 vulnerabilities: ghsa-vffh-x6r8-xx99, CVE-2026-40179...

CLEANSTART-2026-BA47995 Security fixes in istio-fips 1.26.8-r1

Package istio-fips version 1.26.8-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-LR50335 Security fixes in istio-fips 1.27.4-r0

Package istio-fips version 1.27.4-r0 fixes 3 vulnerabilities: CVE-2025-47913, CVE-2025-58181, CVE-2025-47914...

CLEANSTART-2026-JB52319 Security fixes in istio-fips 1.27.8-r0

Package istio-fips version 1.27.8-r0 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: emissary, cert-manager, crossplane, tekton-pipelines, cluster-api-ipam-provider-in-cluster, cilium, keda, gatekeeper, kubernetes-csi-external-snapshotter, kots, cluster-api-gcp-controller, node-feature-discovery, tkn, spicedb, flux-notification-controller,...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, step-issuer, kuberay-operator, cert-manager-cmctl, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, cert-manager-csi-driver, mariadb-operator...

CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

CVE-2026-47237

CVE-2026-47237 affects Kubeflow Community Distribution prior to version 26.03-rc.1. A Kubeflow setup based on official manifests or most packaged distributions is vulnerable to authorization token stealing from any Kubeflow UI/API user (Dashboard, Pipelines API, Notebooks). An attacker with kubef...

CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

CLEANSTART-2026-VV82680 Security fixes for CVE-2025-11065, CVE-2025-15558, CVE-2026-24051, CVE-2026-25680, CVE-2026-27145, CVE-2026-33186, CVE-2026-34986, CVE-2026-35469, CVE-2026-39821, CVE-2026-39883, CVE-2026-40179, CVE-2026-42504, ghsa-2464-8j7c-4cjm, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-vffh-x6r8-xx99 applied in versions: 1.27.9-r0, 1.27.9-r1, 1.28.7-r0, 1.28.7-r1, 1.28.7-r2

Multiple security vulnerabilities affect the istio package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MJ39387 Security fixes for CVE-2025-15558, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-40179, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-44903, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-8rm2-7qqf-34qm, ghsa-fw8g-cg8f-9j28, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 1.29.0-r0, 1.29.0-r1, 1.29.1-r0, 1.29.2-r0, 1.29.2-r1, 1.29.2-r2

Multiple security vulnerabilities affect the istio package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SM80424 Security fixes for CVE-2025-15558, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-40179, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-44903, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-8rm2-7qqf-34qm, ghsa-fw8g-cg8f-9j28, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 1.29.0-r0, 1.29.0-r1, 1.29.1-r0, 1.29.2-r0, 1.29.2-r1, 1.29.2-r2

Multiple security vulnerabilities affect the istio package. These issues are resolved in later releases. See references for individual vulnerability details...