CLEANSTART-2026-SA70432 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-537c-gmf6-5ccf, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.4.0-r0, 2.4.0-r1

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YC81398 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-6357, CVE-2026-8643, ghsa-58qw-9mgm-455v, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.7.1-r0, 2.7.4-r1

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NR60332 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-537c-gmf6-5ccf, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.5.5-r0

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DD95169 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-6357, ghsa-58qw-9mgm-455v, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.7.1-r0

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZO99127 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-6357, ghsa-58qw-9mgm-455v, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.7.1-r0

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN42198 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-48710, CVE-2026-6357, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.2.3-r0, 2.2.3-r1

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-46857

Impact Any network-reachable caller can write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card. In a misconfigured deployment e.g., following the production Docker example in the README, this is exploitable from the local network without...

CVE-2026-23490 vulnerabilities

Vulnerabilities for packages: airflow, open-webui, superset, kubeflow-jupyter-web-app, mlflow, kubeflow-katib, py3-cassandra-medusa, k8s-sidecar, kubeflow-volumes-web-app, dask-kubernetes, kubeflow-pipelines, kserve, kubeflow-pipelines-visualization-server...

GHSA-63VM-454H-VHHQ vulnerabilities

Vulnerabilities for packages: airflow, open-webui, superset, kubeflow-jupyter-web-app, mlflow, kubeflow-katib, py3-cassandra-medusa, k8s-sidecar, kubeflow-volumes-web-app, dask-kubernetes, kubeflow-pipelines, kserve, kubeflow-pipelines-visualization-server...

GHSA-63VM-454H-VHHQ vulnerabilities

Vulnerabilities for packages: kserve, gitlab-cng-fips, dbt-bigquery, localstack, spamcheck, kubeflow-pipelines, kubeflow-volumes-web-app, superset, litellm, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, authentik-fips, ansible-operator-fips, pgadmin4, authentik, open-webui,...

CVE-2026-23490 vulnerabilities

Vulnerabilities for packages: kserve, gitlab-cng-fips, dbt-bigquery, localstack, spamcheck, kubeflow-pipelines, kubeflow-volumes-web-app, superset, litellm, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, authentik-fips, ansible-operator-fips, pgadmin4, authentik, open-webui,...

GHSA-7F5H-V6XP-FCQ8 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, reflex, k8s-sidecar, kserve...

CVE-2025-62727 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, reflex, k8s-sidecar, kserve...

CVE-2025-62727 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, open-webui, airflow-core, reflex, kserve, mlflow, airflow, nemo...

GHSA-7F5H-V6XP-FCQ8 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, open-webui, airflow-core, reflex, kserve, mlflow, airflow, nemo...

Multiple Kubernetes Sidecar Containers CVE-2019-11255 Unauthorized Access Vulnerability

Description Multiple Kubernetes Sidecar Containers are prone to an unauthorized access vulnerability. An attacker can exploit this issue to gain unauthorized access and perform unintended actions. This may lead to further attacks. Technologies Affected Kubernetes external-provisioner 0.4.1...