CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: nerdctl, local-static-provisioner, actions-runner-controller, aws-network-policy-agent, wgcf, docker-cli-buildx, aws-node-termination-handler, sriov-network-device-plugin, gostatsd, rancher, terraform-mcp-server, kubernetes-csi-external-snapshotter,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, gitlab-workhorse-ce-fips, upwind-agent, mattermost, prometheus-mongodb-exporter, minio-fips, flux-source-controller-fips, spire-server, argo-workflows, flux-source-controller, prometheus-operator, zarf-fips, argo-workflows-fips, coder, kubernetes, kaf...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, gitlab-workhorse-ce-fips, podman-fips, upwind-agent, external-secrets-operator, mattermost, prometheus-mongodb-exporter, buildah, step, step-kms-plugin, witness, flux-source-controller-fips, spire-server, argo-workflows, flux-source-controller,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, crossplane-aws-provider-fips, crossplane-provider-aws-eks-fips, step, flux-source-controller-fips, google-guest-agent-manager, clickhouse-backup-fips, crossplane-provider-aws-efs-fips, argo-workflows, flux-source-controller,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, gitlab-workhorse-ce-fips, podman-fips, upwind-agent, external-secrets-operator, mattermost, prometheus-mongodb-exporter, witness, minio-fips, flux-source-controller-fips, longhorn-manager-fips, clickhouse-backup-fips, spire-server, argo-workflows,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, crossplane-aws-provider-fips, gitlab-workhorse-ce-fips, podman-fips, upwind-agent, external-secrets-operator, mattermost, prometheus-mongodb-exporter, buildah, step, minio-fips, step-kms-plugin, flux-source-controller-fips, google-guest-agent-manager,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, gitlab-workhorse-ce-fips, podman-fips, upwind-agent, mattermost, prometheus-mongodb-exporter, buildah, spire-server, argo-workflows, prometheus-operator, argo-workflows-fips, kubernetes, buildah-fips, kaf, cloud-provider-aws, gitlab-rails-ce, kots,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, crossplane-aws-provider-fips, crossplane-provider-aws-eks-fips, step, flux-source-controller-fips, google-guest-agent-manager, clickhouse-backup-fips, crossplane-provider-aws-efs-fips, argo-workflows, flux-source-controller,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, gitlab-workhorse-ce-fips, upwind-agent, mattermost, prometheus-mongodb-exporter, minio-fips, flux-source-controller-fips, spire-server, argo-workflows, flux-source-controller, prometheus-operator, zarf-fips, argo-workflows-fips, coder, kubernetes, kaf...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, gitlab-workhorse-ce-fips, podman-fips, upwind-agent, external-secrets-operator, mattermost, prometheus-mongodb-exporter, witness, minio-fips, flux-source-controller-fips, spire-server, argo-workflows, flux-source-controller, prometheus-operator,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, crossplane-aws-provider-fips, gitlab-workhorse-ce-fips, podman-fips, upwind-agent, external-secrets-operator, mattermost, prometheus-mongodb-exporter, buildah, step, minio-fips, step-kms-plugin, flux-source-controller-fips, google-guest-agent-manager,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, gitlab-workhorse-ce-fips, podman-fips, upwind-agent, mattermost, prometheus-mongodb-exporter, buildah, spire-server, argo-workflows, prometheus-operator, argo-workflows-fips, terraform-fips, kubernetes, buildah-fips, kaf, cloud-provider-aws,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, gitlab-workhorse-ce-fips, podman-fips, upwind-agent, external-secrets-operator, mattermost, prometheus-mongodb-exporter, witness, minio-fips, flux-source-controller-fips, longhorn-manager-fips, clickhouse-backup-fips, spire-server, argo-workflows,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: nerdctl, skaffold, telegraf, kaf, minio, argocd-image-updater, k3s, aactl, kine, flux, cloud-provider-aws, mattermost, cilium, chisel, prometheus-operator, rancher, kubernetes-dashboard, trivy, gitlab-kas, gitea, prometheus, external-dns,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: nerdctl, telegraf, kaf, minio, k3s, aactl, kine, flux, cloud-provider-aws, mattermost, cilium, docker-cli-buildx, prometheus-operator, rancher, kubernetes-dashboard, cert-manager, gitlab-kas, podman, prometheus, external-dns, buildah, kubernetes, istio,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: nerdctl, skaffold, telegraf, kaf, minio, docker-machine-driver-harvester, argocd-image-updater, k3s, aactl, kine, flux, cloud-provider-aws, mattermost, cilium, chisel, prometheus-operator, rancher, kubernetes-dashboard, trivy, gitlab-kas, gitea, prometheus,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: gptscript, nerdctl, skaffold, guac, splunk-otel-collector, act, kaf, telegraf, terragrunt, wolfictl, minio, argocd-image-updater, k3s, apko, aactl, kine, flux, pulumi-language-dotnet, cloud-provider-aws, mattermost, cilium, external-secrets-operator, nuclei,...