399 matches found
CLEANSTART-2026-FT89883 Security fix for CVE-2026-48710 applied in: airflow-3 3.0.6-r5, airflow-3 3.1.8-r2, airflow-3 3.2.0-r0, k8s-sidecar 2.2.3-r1, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0
CVE-2026-48710 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-HB96451 Security fix for CVE-2026-8643 applied in: k8s-sidecar 2.4.0-r1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r1, k8s-sidecar 2.7.1-r1, k8s-sidecar 2.7.4-r1, miniforge3 25.11.0.1-r3, miniforge3 26.1.0.0-r3, miniforge3 26.1.1.0-r2, python3 3.12.13-r1
CVE-2026-8643 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-CU26227 Security fix for CVE-2026-54278 applied in: jupyterhub-k8s-hub 4.3.5-r2, kserve-storage-controller 0.19.0-r0
CVE-2026-54278 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-EG18044 Security fix for CVE-2026-54274 applied in: jupyterhub-k8s-hub 4.3.5-r2, kserve-storage-controller 0.19.0-r0
CVE-2026-54274 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-TM43403 Security fix for CVE-2026-54277 applied in: jupyterhub-k8s-hub 4.3.5-r2, kserve-storage-controller 0.19.0-r0
CVE-2026-54277 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OZ78618 Security fix for CVE-2026-54273 applied in: jupyterhub-k8s-hub 4.3.5-r2, kserve-storage-controller 0.19.0-r0
CVE-2026-54273 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-LF30354 Security fix for CVE-2026-54276 applied in: jupyterhub-k8s-hub 4.3.5-r2, kserve-storage-controller 0.19.0-r0
CVE-2026-54276 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-YI50713 Security fix for CVE-2026-54275 applied in: jupyterhub-k8s-hub 4.3.5-r2, kserve-storage-controller 0.19.0-r0
CVE-2026-54275 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KI86994 Security fix for CVE-2026-54280 applied in: jupyterhub-k8s-hub 4.3.5-r2, kserve-storage-controller 0.19.0-r0
CVE-2026-54280 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SV63364 Security fix for CVE-2026-54279 applied in: jupyterhub-k8s-hub 4.3.5-r2, kserve-storage-controller 0.19.0-r0
CVE-2026-54279 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ON23616 Security fix for CVE-2026-59886 applied in: airflow-3 3.0.6-r1, airflow-3 3.1.8-r6, airflow-3 3.2.1-r6, airflow-3 3.2.2-r1, airflow-3 3.3.1-r1, apache-superset 5.0.0-r9, apache-superset 6.0.0-r7, apache-superset 6.1.0-r1, k8s-sidecar 2.6.1-r0, kserve-storage-controller 0.19.0-r0, tensorflow-gpu-jupyter 2.20.0-r1
CVE-2026-59886 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SL06718 Security fix for CVE-2026-13346 applied in: k8s-sidecar 2.6.1-r0, k8s-sidecar 2.8.2-r0, miniforge3 26.1.1.3-r1, miniforge3 26.3.2.3-r1, python3 3.11.15-r1
CVE-2026-13346 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-AM62510 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the consul-k8s-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
PT-2026-99822
Multiple security vulnerabilities affect the consul-k8s-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-k8s: opentelemetry-collector-k8s-0.161.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-k8s-0.161.0-0.1.hum1.src src...
CLEANSTART-2026-RT26999 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels
Multiple security vulnerabilities affect the k8s-sidecar package. pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. See references for individual vulnerability details...
CLEANSTART-2026-QK89502 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the vault-k8s package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-KP10631 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Multiple security vulnerabilities affect the vault-k8s package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for...
CLEANSTART-2026-RE83921 Previously, a channel registered in the mux's chanList is not usable until it is established
Multiple security vulnerabilities affect the vault-k8s package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
