CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-hop, floci-az, apache-pulsar-fips, zipkin, hono, apache-activemq-artemis, floci, knative-kafka-broker, tez, apache-pulsar, celeborn, neo4j, pinot-fips, keycloak, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, keycloak-fips...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-hop, floci-az, apache-pulsar-fips, zipkin, hono, apache-activemq-artemis, floci, knative-kafka-broker, tez, apache-pulsar, celeborn, neo4j, pinot-fips, keycloak, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, keycloak-fips...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-hop, floci-az, apache-pulsar-fips, zipkin, hono, apache-activemq-artemis, floci, knative-kafka-broker, tez, apache-pulsar, celeborn, neo4j, pinot-fips, keycloak, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, keycloak-fips...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

The vulnerabilities of the components camel-knative-http, camel-cxf-rest, and camel-cxf-transport from the Apache Camel framework allow attackers to execute arbitrary code or gain unauthorized access during write operations.

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: azurefile-csi-fips, ocm-cli, gitlab-workhorse-ce-fips, frankenphp-8.3, timestamp-authority, caddy-fips, azuredisk-csi, backup-restore-operator, keda-fips, cerbos-fips, elastic-agent-fips, knative-serving-fips, virt-operator-fips, scorecard, harbor-fips,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, buildkitd, docker-cli-buildx, gomplate, gitlab-runner, grafana-operator, newrelic-infrastructure-agent, kubelet-csr-approver, kyverno-notation-aws, addon-resizer, mailpit, fluent-bit-plugin-loki, cue, kubernetes-dashboard, gogatekeeper,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: mattermost-fips, prometheus, traefik-fips, gitlab-rails-ce-fips, omnictl-multiarch, backup-restore-operator, kyverno-fips, keda-fips, prometheus-mongodb-exporter, containerd, k3s, argo-events-fips, nemo, telegraf, traefik, guac, gitsign, harbor-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: drone, gitlab-workhorse-ce-fips, frankenphp-8.3, omnictl-multiarch, backup-restore-operator, keda-fips, trivy-operator-fips, elastic-agent-fips, knative-serving-fips, minio, harbor-fips, argo-workflows, tigera-operator, zitadel, trivy-operator, seaweedfs-rocksdb,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: drone, gitlab-workhorse-ce-fips, frankenphp-8.3, omnictl-multiarch, backup-restore-operator, keda-fips, trivy-operator-fips, elastic-agent-fips, knative-serving-fips, minio, harbor-fips, argo-workflows, tigera-operator, zitadel, trivy-operator, seaweedfs-rocksdb,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: drone, external-secrets-operator, k8sgpt, gitlab-workhorse-ce-fips, frankenphp-8.3, caddy-fips, chezmoi, gomplate-fips, chainctl, fulcio, backup-restore-operator, omnictl-multiarch, sops-fips, teleport, keda-fips, trivy-operator-fips, elastic-agent-fips, falcoctl, cg...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: drone, external-secrets-operator, gitlab-workhorse-ce-fips, frankenphp-8.3, gomplate-fips, chezmoi, longhorn-manager-fips, chainctl, longhorn-cli-fips, omnictl-multiarch, backup-restore-operator, keda-fips, trivy-operator-fips, elastic-agent-fips, cg,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: drone, external-secrets-operator, k8sgpt, gitlab-workhorse-ce-fips, frankenphp-8.3, caddy-fips, chezmoi, gomplate-fips, chainctl, fulcio, backup-restore-operator, omnictl-multiarch, sops-fips, teleport, keda-fips, trivy-operator-fips, elastic-agent-fips, falcoctl, cg...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gomplate-fips, chezmoi, crossplane-provider-aws-lambda-fips, longhorn-cli-fips, crossplane-provider-aws-secretsmanager-fips, keda-fips, falcoctl, cg, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-cloudsearch-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gomplate-fips, chezmoi, crossplane-provider-aws-lambda-fips, longhorn-cli-fips, crossplane-provider-aws-secretsmanager-fips, keda-fips, falcoctl, cg, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-cloudsearch-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gitlab-workhorse-ce-fips, frankenphp-8.3, gomplate-fips, chezmoi, chainctl, omnictl-multiarch, backup-restore-operator, keda-fips, trivy-operator-fips, elastic-agent-fips, cg, knative-serving-fips, minio, scorecard, harbor-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, frankenphp-8.3, omnictl-multiarch, backup-restore-operator, keda-fips, elastic-agent-fips, knative-serving-fips, minio, harbor-fips, argo-workflows, tigera-operator, zitadel, docker-cli-buildx, gatekeeper-fips, calico-fips, helm,...