GO-2026-4985 vulnerabilities

Vulnerabilities for packages: cloudprober, thanos, tekton-pipelines, aactl, splunk-otel-collector, teleport, docker-cli-buildx, kiali, opentelemetry-operator, grafana-rollout-operator, buildkitd, grafana-mimir, opentofu, amazon-cloudwatch-agent, terragrunt, distribution,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: external-dns, fscrypt, knative-serving, minio, cilium-cli, nerdctl, spire-server, k3s, prometheus-operator, podman, cilium, snyk-cli, flux, helm, kubernetes-dashboard, buildah, aactl, external-secrets-operator, kubernetes, docker-cli-buildx, mattermost, cert-manager,...

CLEANSTART-2026-BT37614 Security fixes in knative-net-istio 1.21.4-r0

Package knative-net-istio version 1.21.4-r0 fixes 6 vulnerabilities: CVE-2026-24051, CVE-2026-29181, CVE-2026-33186, CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-SA31637 Security fixes in knative-net-istio 1.21.4-r2

Package knative-net-istio version 1.21.4-r2 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-259r-337f-4rfw...

CLEANSTART-2026-KT57055 Security fixes in knative-serving 1.20.3-r0

Package knative-serving version 1.20.3-r0 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-KT94915 Security fixes in knative-net-istio 1.22.1-r0

Package knative-net-istio version 1.22.1-r0 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178...

CLEANSTART-2026-HQ56526 Security fixes in knative-net-istio 1.21.4-r1

Package knative-net-istio version 1.21.4-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-NM43340 Security fixes in knative-serving 1.22.1-r0

Package knative-serving version 1.22.1-r0 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apache-hop, knative-kafka-broker-fips, hadoop-fips, keycloak-fips, floci-az, tez, apache-pulsar, apache-hop-fips, request-9047-keycloak-fips, apicurio-registry, keycloak, neo4j, floci, knative-kafka-broker, management-api-for-apache-cassandra-5.0, zipkin,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: apache-hop, knative-kafka-broker-fips, hadoop-fips, keycloak-fips, floci-az, tez, apache-pulsar, apache-hop-fips, request-9047-keycloak-fips, apicurio-registry, keycloak, neo4j, floci, knative-kafka-broker, management-api-for-apache-cassandra-5.0, zipkin,...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: apache-hop, knative-kafka-broker-fips, hadoop-fips, keycloak-fips, floci-az, tez, apache-pulsar, apache-hop-fips, request-9047-keycloak-fips, apicurio-registry, keycloak, neo4j, floci, knative-kafka-broker, management-api-for-apache-cassandra-5.0, zipkin,...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

The vulnerabilities of the components camel-knative-http, camel-cxf-rest, and camel-cxf-transport from the Apache Camel framework allow attackers to execute arbitrary code or gain unauthorized access during write operations.

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: mattermost, k9s-fips, commercial-chainloop-backend, vault-secrets-operator-fips, vault-secrets-operator, kube-fluentd-operator, elastic-agent-fips, redka, timestamp-authority, karpenter, elastic-agent, kyverno-policy-reporter-plugins-kyverno-fips, commercial-grafana,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: cue, continuity, kyverno-policy-reporter-ui, cilium-cli, gh, kubernetes-ingress-defaultbackend, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, azcopy, dataplaneapi, mattermost, fuse-overlayfs-snapshotter, kiali...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: mattermost, keda-fips, prometheus-mongodb-exporter, argo-workflows, gitlab-rails-ce, argo-events, argocd-image-updater, etcd, flux, knative-kafka-broker-fips, guac, istio, kube-conformance, containerd, commercial-grafana, grafana, kubernetes-fips, argo-cd, etcd-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: mattermost, k9s-fips, kubescape-server-fips, cloudbeat, elastic-agent-fips, drone, cert-manager, chisel, commercial-grafana, kubernetes-fips, zarf-fips, tekton-pipelines-fips, tigera-operator, zarf, tekton-pipelines, gatekeeper, vault, gatekeeper-fips, kots, k9s,...