GO-2026-6225 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, crossplane, knative-serving, crossplane-fips, knative-serving-fips, tekton-pipelines, kubeflow-katib...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: kyverno, fscrypt, kubernetes, mattermost, cilium, loki, cert-manager, snyk-cli, knative-serving, aactl, kaf, k3s, containerd, opentelemetry-collector, telegraf, external-secrets-operator, cloud-provider-aws, docker-cli-buildx, falco-no-driver, buildah, kine, kots,...

CLEANSTART-2026-KT57055 Security fixes in knative-serving 1.20.3-r0

Package knative-serving version 1.20.3-r0 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-NM43340 Security fixes in knative-serving 1.22.1-r0

Package knative-serving version 1.22.1-r0 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, kyverno-notation-aws, amass, k8s-device-plugin, litestream, glab, portieris, k3s, libnvidia-container, step-ca, node-problem-detector, lazydocker, nri-discovery-kubernetes, kube-vip, nri-mongodb, falco-no-driver, argo-events,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, kubernetes-fips, terraform, flux-fips, gitlab-rails-ce, cert-manager, tekton-pipelines, argo-cd, commercial-grafana, drone-fips, flux-image-automation-controller, external-secrets-operator-fips, k3s, traefik, seaweedfs-rocksdb-fips, k9s, grafan...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, kubernetes-fips, terraform, flux-fips, gitlab-rails-ce, cert-manager, tekton-pipelines, argo-cd, commercial-grafana, drone-fips, flux-image-automation-controller, external-secrets-operator-fips, k3s, traefik, seaweedfs-rocksdb-fips, k9s, grafan...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: flux-notification-controller-fips, knative-eventing-fips, falcoctl, terraform-fips, kubernetes-fips, crossplane-provider-azure-storagecache, datadog-agent-fips, step-kms-plugin-fips, tekton-chains, terraform, flux-kustomize-controller-fips, flux-fips, atlantis-fips,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, terraform-fips, kubernetes-fips, datadog-agent-fips, terraform, longhorn-manager-fips, flux-fips, gitlab-rails-ce, cert-manager, tekton-pipelines, podman-fips, apko-fips, chainloop-cli, argo-cd, commercial-grafana, redpanda-console, drone-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-notification-controller-fips, knative-eventing-fips, falcoctl, terraform-fips, kubernetes-fips, crossplane-provider-azure-storagecache, datadog-agent-fips, step-kms-plugin-fips, tekton-chains, terraform, flux-kustomize-controller-fips, flux-fips, atlantis-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, terraform-fips, kubernetes-fips, terraform, flux-fips, gitlab-rails-ce, cert-manager, tekton-pipelines, podman-fips, apko-fips, chainloop-cli, argo-cd, commercial-grafana, redpanda-console, pulumi-language-java, flux-image-automation-controller...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, crossplane-provider-aws-macie2-fips, kueue-fips, crossplane-provider-azure-servicenetworking, glab, crossplane-provider-aws-ssm-fips, kyverno-policy-reporter-plugins-kyverno, external-secrets-operator-fips, k3s,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, crossplane-provider-aws-macie2-fips, kueue-fips, crossplane-provider-azure-servicenetworking, glab, crossplane-provider-aws-ssm-fips, kyverno-policy-reporter-plugins-kyverno, external-secrets-operator-fips, k3s,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, terraform-fips, kubernetes-fips, terraform, gitlab-rails-ce, cert-manager, tekton-pipelines, podman-fips, argo-cd, commercial-grafana, external-secrets-operator-fips, k3s, traefik, grafana, falco-no-driver, buildah, prometheus-mongodb-exporter,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, terraform-fips, kubernetes-fips, step-kms-plugin-fips, terraform, flux-fips, gitlab-rails-ce, cert-manager, tekton-pipelines, podman-fips, apko-fips, chainloop-cli, argo-cd, commercial-grafana, redpanda-console, pulumi-language-java,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, kubernetes-fips, terraform, gitlab-rails-ce, cert-manager, tekton-pipelines, podman-fips, argo-cd, commercial-grafana, external-secrets-operator-fips, k3s, traefik, grafana, falco-no-driver, buildah, prometheus-mongodb-exporter, podman,...