GO-2026-5005 vulnerabilities

Vulnerabilities for packages: istio, gitlab-kas, k3s, telegraf, knative-serving, docker-cli-buildx, rancher, prometheus-operator, kyverno, opentelemetry-collector, kots, flux, cilium-cli, buildah, mattermost, prometheus, cert-manager, loki, helm, aactl, nerdctl, kubernetes, minio,...

CLEANSTART-2026-KT57055 Security fixes in knative-serving 1.20.3-r0

Package knative-serving version 1.20.3-r0 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-NM43340 Security fixes in knative-serving 1.22.1-r0

Package knative-serving version 1.22.1-r0 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, knative-serving, docker, newrelic-fluent-bit-output, cosign, kubernetes-csi-external-snapshotter, tempo, goreleaser, kubo, cilium-certgen, crossplane-provider-aws-iam, kube-rbac-proxy, spicedb, gitaly, clickhouse-operator, kserve-modelmesh-serving...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: k9s, minio, prometheus-operator, gitea, reports-server, knative-eventing-fips, vault-fips, trivy-fips, trivy, chisel, argo-workflows, frankenphp-8.3, keda-fips, telegraf, harbor-fips, skaffold-fips, seaweedfs-rocksdb, tigera-operator, trivy-operator, minio-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: k9s, pulumi-kubernetes-operator, minio, prometheus-operator, gitea, reports-server, traefik-fips, fulcio, knative-eventing-fips, vault-fips, trivy-fips, sops-fips, chisel, crossplane, argo-workflows, frankenphp-8.3, chainloop-cli-fips, keda-fips, harbor-fips, telegra...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: k9s, pulumi-kubernetes-operator, minio, prometheus-operator, gitea, reports-server, knative-eventing-fips, vault-fips, trivy-fips, trivy, chisel, argo-workflows, frankenphp-8.3, chainloop-cli-fips, keda-fips, harbor-fips, telegraf, skaffold-fips, jfrog-cli, nfpm,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: k9s, minio, prometheus-operator, gitea, reports-server, knative-eventing-fips, vault-fips, trivy-fips, trivy, chisel, argo-workflows, frankenphp-8.3, keda-fips, telegraf, harbor-fips, skaffold-fips, seaweedfs-rocksdb, tigera-operator, trivy-operator, minio-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: k9s, pulumi-kubernetes-operator, minio, prometheus-operator, gitea, reports-server, traefik-fips, fulcio, knative-eventing-fips, vault-fips, trivy-fips, sops-fips, chisel, crossplane, argo-workflows, frankenphp-8.3, chainloop-cli-fips, keda-fips, harbor-fips, telegra...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-networkmanager-fips, knative-eventing-fips, vault-fips, trivy, crossplane-provider-aws-kinesis, frankenphp-8.3, restic-fips, nfpm, crossplane-provider-aws-cloudtrail-fips, crossplane-provider-azure-notificationhubs, tigera-operator,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-networkmanager-fips, knative-eventing-fips, vault-fips, trivy, crossplane-provider-aws-kinesis, frankenphp-8.3, restic-fips, nfpm, crossplane-provider-aws-cloudtrail-fips, crossplane-provider-azure-notificationhubs, tigera-operator,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: k9s, pulumi-kubernetes-operator, minio, prometheus-operator, gitea, reports-server, knative-eventing-fips, vault-fips, trivy-fips, trivy, argo-workflows, frankenphp-8.3, chainloop-cli-fips, keda-fips, harbor-fips, telegraf, skaffold-fips, jfrog-cli, nfpm,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: minio, prometheus-operator, reports-server, knative-eventing-fips, vault-fips, argo-workflows, frankenphp-8.3, keda-fips, telegraf, harbor-fips, tigera-operator, kyverno-fips, omnictl-multiarch, external-dns, external-secrets-operator, tekton-pipelines,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: k9s, pulumi-kubernetes-operator, minio, prometheus-operator, gitea, reports-server, knative-eventing-fips, vault-fips, trivy-fips, trivy, argo-workflows, frankenphp-8.3, chainloop-cli-fips, keda-fips, harbor-fips, telegraf, skaffold-fips, jfrog-cli, nfpm,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: k9s, pulumi-kubernetes-operator, minio, prometheus-operator, gitea, reports-server, knative-eventing-fips, vault-fips, trivy-fips, trivy, chisel, argo-workflows, frankenphp-8.3, chainloop-cli-fips, keda-fips, harbor-fips, telegraf, skaffold-fips, jfrog-cli, nfpm,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: minio, prometheus-operator, reports-server, knative-eventing-fips, vault-fips, argo-workflows, frankenphp-8.3, keda-fips, telegraf, harbor-fips, tigera-operator, kyverno-fips, omnictl-multiarch, external-dns, external-secrets-operator, tekton-pipelines,...