CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, apache-activemq-artemis, floci, apache-pulsar-fips, tez, pinot, keycloak, apache-hop, keycloak-fips, zipkin, floci-az, tinkerpop, pinot-fips, seata, thingsboard, hadoop-fips, hono, apache-hop-fips, apicurio-registry,...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, apache-activemq-artemis, floci, apache-pulsar-fips, tez, pinot, keycloak, apache-hop, keycloak-fips, zipkin, floci-az, tinkerpop, pinot-fips, seata, thingsboard, hadoop-fips, hono, apache-hop-fips, apicurio-registry,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, apache-activemq-artemis, floci, apache-pulsar-fips, tez, pinot, keycloak, apache-hop, keycloak-fips, zipkin, floci-az, tinkerpop, pinot-fips, seata, thingsboard, hadoop-fips, hono, apache-hop-fips, apicurio-registry,...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

The vulnerabilities of the components camel-knative-http, camel-cxf-rest, and camel-cxf-transport from the Apache Camel framework allow attackers to execute arbitrary code or gain unauthorized access during write operations.

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

Exploit for Improper Handling of Case Sensitivity in Apache Camel

camel-cxf-rest / camel-cxf / camel-knative-http Header Injecti...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: rclone-fips, azurefile-csi, hubble, gatekeeper, karpenter, knative-operator-fips, gatekeeper-fips, flux, langfuse, dataplaneapi-fips, kube-arangodb-fips, rekor, loki, fleet-server, commercial-expanso-edge, azuredisk-csi, docker-cli-fips, k8s-device-plugin, podman-fip...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, step-issuer, flyte, haproxy-ingress, falcosidekick, nri-postgresql, kpt, rancher-system-upgrade-controller, gitness, crossplane-provider-aws-s3, amazon-cloudwatch-agent-operator, undock, nri-kubernetes, bank-vaults, k3s, argocd-image-updater,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: telegraf, argo-workflows, zitadel, gatekeeper, opentofu, flux, prometheus, external-secrets-operator, vault, kube-conformance, loki, argo-events, commercial-grafana, guac, nemo, harbor-fips, gitlab-workhorse-ce, commercial-expanso-edge, etcd, vault-fips, grafana-fips...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: argo-workflows, chisel, minio-fips, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, aactl, spire-server, commercial-expanso-edge, external-secrets-operator-fips, skaffold, coder-fips, k9s-fips, argo-cd, commercial-kyverno, seaweedfs-rocksdb-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argo-workflows, chisel, minio-fips, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, aactl, spire-server, commercial-expanso-edge, external-secrets-operator-fips, skaffold, coder-fips, k9s-fips, argo-cd, commercial-kyverno, seaweedfs-rocksdb-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: ollama-fips, argo-workflows, chisel, crossplane-provider-azure-securityinsights, minio-fips, gatekeeper, crossplane-provider-azure-authorization, gatekeeper-fips, tkn, flux, fulcio-fips, kube-arangodb-fips, flux-operator-fips, openbao, loki, witness, aactl,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: argo-workflows, chisel, minio-fips, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, witness, aactl, argo-events, rancher-machine, spire-server, chezmoi, peerdb-flow, commercial-expanso-edge, podman-fips, external-secrets-operator-fips, skaffold,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: ollama-fips, argo-workflows, chisel, crossplane-provider-azure-securityinsights, minio-fips, gatekeeper, crossplane-provider-azure-authorization, gatekeeper-fips, tkn, flux, fulcio-fips, kube-arangodb-fips, flux-operator-fips, openbao, loki, witness, aactl,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: argo-workflows, minio-fips, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, witness, aactl, argo-events, spire-server, chezmoi, commercial-expanso-edge, podman-fips, external-secrets-operator-fips, skaffold, k9s-fips, argo-cd, gptscript,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: minio-fips, crossplane-provider-aws-cloudsearch-fips, gatekeeper, gatekeeper-fips, crossplane-provider-aws-sesv2-fips, kube-arangodb-fips, loki, crossplane-provider-aws-appflow-fips, aactl, crossplane-provider-aws-cloudformation-fips, crossplane-provider-aws-emr,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: minio-fips, crossplane-provider-aws-cloudsearch-fips, gatekeeper, gatekeeper-fips, crossplane-provider-aws-sesv2-fips, kube-arangodb-fips, loki, crossplane-provider-aws-appflow-fips, aactl, crossplane-provider-aws-cloudformation-fips, crossplane-provider-aws-emr,...