CLEANSTART-2026-UV23635 Security fixes for CVE-2026-44431, CVE-2026-44432 applied in versions: 4.3.3-r0

Multiple security vulnerabilities affect the jupyterhub-k8s-hub package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VU08393 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.6.1-r0, 2.6.1-r1, 2.6.1-r7, 2.6.1-r8, 2.6.1-r9

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZA63260 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.5.1-r0, 2.5.1-r1, 2.5.1-r2, 2.5.1-r3, 2.5.1-r4

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-56361

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41898 vulnerabilities

Vulnerabilities for packages: vector, bootc, sqlx, sdp-k8s-injector, deno, typst, ztunnel-fips, rustup, guestproxyagent, komodo, rustls-openssl-client, valkey-ldap, sccache, sentry-cli, rpm-sequoia...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: cert-manager-google-cas-issuer, external-secrets-fips, beats, crossplane-provider-azure-streamanalytics, crossplane-provider-azure-storagecache, percona-xtradb-cluster-operator, crossplane-provider-aws-cognitoidentity, kyverno-policy-reporter-plugins-trivy-fips,...

CVE-2026-41677 vulnerabilities

Vulnerabilities for packages: vector, bootc, sqlx, sdp-k8s-injector, deno, typst, ztunnel-fips, rustup, guestproxyagent, komodo, rustls-openssl-client, valkey-ldap, sccache, sentry-cli, rpm-sequoia...

CVE-2026-41681 vulnerabilities

Vulnerabilities for packages: vector, bootc, sqlx, sdp-k8s-injector, deno, typst, ztunnel-fips, rustup, guestproxyagent, komodo, rustls-openssl-client, valkey-ldap, sccache, sentry-cli, rpm-sequoia...

GHSA-8C75-8MHR-P7R9 vulnerabilities

Vulnerabilities for packages: vector, bootc, sqlx, sdp-k8s-injector, deno, typst, ztunnel-fips, rustup, guestproxyagent, komodo, rustls-openssl-client, valkey-ldap, sccache, sentry-cli, rpm-sequoia...

GHSA-GHM9-CR32-G9QJ vulnerabilities

Vulnerabilities for packages: vector, bootc, sqlx, sdp-k8s-injector, deno, typst, ztunnel-fips, rustup, guestproxyagent, komodo, rustls-openssl-client, valkey-ldap, sccache, sentry-cli, rpm-sequoia...

GHSA-HPPC-G8H3-XHP3 vulnerabilities

Vulnerabilities for packages: vector, bootc, sqlx, sdp-k8s-injector, deno, typst, ztunnel-fips, rustup, guestproxyagent, komodo, rustls-openssl-client, valkey-ldap, sccache, sentry-cli, rpm-sequoia...

CVE-2026-41676 vulnerabilities

Vulnerabilities for packages: vector, bootc, sqlx, sdp-k8s-injector, deno, typst, ztunnel-fips, rustup, guestproxyagent, komodo, rustls-openssl-client, valkey-ldap, sccache, sentry-cli, rpm-sequoia...

CVE-2026-41678 vulnerabilities

Vulnerabilities for packages: vector, bootc, sqlx, sdp-k8s-injector, deno, typst, ztunnel-fips, rustup, guestproxyagent, komodo, rustls-openssl-client, valkey-ldap, sccache, sentry-cli, rpm-sequoia...

GHSA-XMGF-HQ76-4VX2 vulnerabilities

Vulnerabilities for packages: vector, bootc, sqlx, sdp-k8s-injector, deno, typst, ztunnel-fips, rustup, guestproxyagent, komodo, rustls-openssl-client, valkey-ldap, sccache, sentry-cli, rpm-sequoia...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kube-arangodb, infinispan-operator, redis-operator, velero, kots, argo-cd, vcluster, kubernetes, trivy-operator, trivy, kubernetes-dashboard-api, k8ssandra-client, sonobuoy, datadog-agent, kwok, argocd-image-updater, docker-cli-buildx, kubeflow-pipelines,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: trivy-operator, cert-manager-istio-csr, k8sgpt-operator, gpu-operator, eck-operator-fips, kpt, kiali-fips, headlamp-fips, percona-xtradb-cluster-operator, gitlab-kas, argo-workflows, skaffold-fips, docker-cli-buildx, argo-rollouts, falcoctl, falcoctl-fips, eks-distro...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: chartmuseum, kube-arangodb, nova, kots, helm-docs, cerbos, tigera-operator, kuma, trivy, trivy-operator, flux, k8ssandra-client, flux-source-controller, helm-operator, harbor, k9s, linkerd2, pluto, rancher-fleet, helm-push, helm-mapkubeapis,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: jfrog-cli, kubescape-server, flux-source-controller, helm-exporter, helm-push, trivy-operator, k8ssandra-client-fips, kube-arangodb, helm-mapkubeapis, k9s-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, chart-testing-fips, cluster-api-helm-controller-fips...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, stakater-reloader, grafana-operator, nova, omnibump, gh, go, victoriametrics, actions-runner-controller, dkron, fluxcd-kustomize-mutating-webhook, grafana-rollout-operator, flux, ingress-nginx-controller, supercronic, victoriametrics-cluster,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, kaf, newrelic-fluent-bit-output, cloud-provider-aws, aws-flb-firehose, kots, kubernetes, aws-flb-kinesis, go, mattermost, flux, ingress-nginx-controller, runc, nerdctl, gitaly, dask-gateway, libnvidia-container, telegraf, cert-manager, redka,...