Important: Red Hat Security Advisory: Submariner v0.24 security fixes and container updates

Submariner v0.24 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

trivy-enforcer

trivy-enforcer EXPERIMENTAL Operador de Kubernetes para el aseguramiento de imágenes Funciona como Controlador de admisión Evita que se desplieguen imágenes inseguras Controlador personalizado Observa el CRD ImageVulnerability y escanea la imagen en el recurso personalizado automáticamente...

CVE-2026-40564

CVE-2026-40564：flink-kubernetes-operator 中通过 FlinkSessionJob.spec.job.jarURI 实现的 SSRF Apache Flink Kubernetes Operator 不会检查 FlinkSessionJob（或 FlinkDeployment）资源上的 spec.job.jarURI 字段。任何能够创建这些资源的人都可以将 jarURI 设置为任意 URL。当 operator 协调该资源时，它会从自己的 Pod 内部获取该 URL。该 scheme 可以是 http、https、file 或 Flink...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, kwok, metallb, opentelemetry-operator, cilium, tekton-chains, k3s, hubble, kube-state-metrics, kubescape-operator, openfga, kuma, spqr, kubescape, k8ssandra-client, cluster-api-ipam-provider-in-cluster, fluent-operator, zo...

GO-2025-3690 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator-fips, seaweedfs-operator...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: melange, grype, k9s, apko, pulumi-language-yaml, wolfictl, gptscript, argo-events, grafana-alloy, trivy, kubevela, argocd-image-updater, kaniko, zarf, crossplane, kots, syft, gitea, scorecard, goreleaser, flux, bom, chezmoi, task, flux-image-automation-controller,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: melange, grype, k9s, apko, pulumi-language-yaml, wolfictl, gptscript, argo-events, grafana-alloy, trivy, kubevela, argocd-image-updater, kaniko, zarf, crossplane, kots, syft, gitea, scorecard, goreleaser, flux, bom, chezmoi, task, flux-image-automation-controller,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: melange, gitlab-runner, grype, k9s, apko, kyverno, pulumi-language-yaml, gptscript, wolfictl, argo-events, trivy-operator, witness, xeol, trivy, kubevela, teleport, argocd-image-updater, cerbos, kaniko, trufflehog, zarf, crossplane, kots, syft, gitea, scorecard, flux...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gitlab-runner, aws-signer-notation-plugin, azure-workload-identity-webhook, timescaledb-parallel-copy, vault-benchmark, crossplane-provider-aws-sns, external-dns, fluxcd-kustomize-mutating-webhook, clickhouse-operator, nri-f5, kubernetes-dns-node-cache,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: timestamp-authority, fulcio, crossplane-provider-azure-storage, opentelemetry-collector-contrib, terraform, falcoctl, argo-events, crossplane-provider-family-azure, buildkitd, crossplane-provider-azure-sql, kubevela, rekor, bank-vaults, vexctl, step-ca, k3d, rook,...

CLEANSTART-2026-IT62249 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r0

Package rabbitmq-messaging-topology-operator version 1.16.0-r0 fixes 55 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

CLEANSTART-2026-DD27612 Security fixes in k8ssandra-operator 1.26.0-r0

Package k8ssandra-operator version 1.26.0-r0 fixes 51 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2025-47911...

CLEANSTART-2026-OO22400 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r1

Package rabbitmq-messaging-topology-operator version 1.16.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

Important: Red Hat Security Advisory: VolSync v0.15 security fixes and container updates

VolSync v0.15 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1

Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...

CLEANSTART-2026-JV61743 Security fixes in pulumi-kubernetes-operator 2.7.0-r0

Package pulumi-kubernetes-operator version 2.7.0-r0 fixes 42 vulnerabilities: CVE-2024-7598, CVE-2025-1767, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136...

CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2

Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

EUVD-2026-46808

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen...

EUVD-2026-46812

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...