CVE-2026-49478 Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage

Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Versions through 1.8.5 improperly follow cross-host redirects and attach Kubernetes ServiceAccount tokens during OIDC discovery, allowing a malicious or compromised issuer to perform blind...

CLEANSTART-2026-YR40466 Security fixes in tigera-operator 1.39.3-r1

Package tigera-operator version 1.39.3-r1 fixes 17 vulnerabilities: CVE-2026-53713, CVE-2026-53714, CVE-2026-53715, CVE-2026-53716, CVE-2026-53717...

CLEANSTART-2026-ZP12441 Security fixes in kubernetes 1.35.7-r0

Package kubernetes version 1.35.7-r0 fixes 1 vulnerabilities: ghsa-gcjh-h69q-9w9g...

CLEANSTART-2026-BB29139 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r2

Package rabbitmq-messaging-topology-operator version 1.16.0-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-OX46889 Security fixes in kubernetes-dns-node-cache 1.26.0-r1

Package kubernetes-dns-node-cache version 1.26.0-r1 fixes 16 vulnerabilities: CVE-2026-32934, CVE-2026-32936, CVE-2026-33190, CVE-2026-33489, CVE-2026-35579...

CLEANSTART-2026-EF97953 Security fixes in kubernetes 1.34.10-r2

Package kubernetes version 1.34.10-r2 fixes 2 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc...

CLEANSTART-2026-KO91610 Security fixes in eck-operator 3.4.1-r1

Package eck-operator version 3.4.1-r1 fixes 2 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-gcjh-h69q-9w9g...

CLEANSTART-2026-NP73250 Security fixes in kubernetes 1.34.10-r4

Package kubernetes version 1.34.10-r4 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-OD86690 Security fixes in kubernetes-dns-node-cache-fips 1.25.0-r1

Package kubernetes-dns-node-cache-fips version 1.25.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CLEANSTART-2026-AZ71908 Security fixes in yunikorn-k8shim 1.5.2-r1

Package yunikorn-k8shim version 1.5.2-r1 fixes 7 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-25680, CVE-2026-42502...

CLEANSTART-2026-IT62249 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r0

Package rabbitmq-messaging-topology-operator version 1.16.0-r0 fixes 55 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

CLEANSTART-2026-CW18997 Security fixes in consul-k8s 2.0.1-r3

Package consul-k8s version 2.0.1-r3 fixes 8 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-50151, CVE-2026-50162, CVE-2026-48978...

CLEANSTART-2026-LB37339 Security fixes in kubernetes-csi-external-resizer-fips 2.2.1-r1

Package kubernetes-csi-external-resizer-fips version 2.2.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-TQ54429 Security fixes in kube-logging-operator 6.7.0-r2

Package kube-logging-operator version 6.7.0-r2 fixes 9 vulnerabilities: CVE-2026-56852, CVE-2026-46600, CVE-2026-44024, CVE-2026-44025, CVE-2026-44160...

CLEANSTART-2026-DJ34817 Security fixes in kubernetes-dns-node-cache-fips 1.24.0-r1

Package kubernetes-dns-node-cache-fips version 1.24.0-r1 fixes 3 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, CVE-2025-22868...

CLEANSTART-2026-IK70425 Security fixes in kubernetes-csi-external-snapshotter 8.6.0-r4

Package kubernetes-csi-external-snapshotter version 8.6.0-r4 fixes 1 vulnerabilities: CVE-2026-39822...

CLEANSTART-2026-IF32046 Security fixes in local-static-provisioner 2.6.0-r1

Package local-static-provisioner version 2.6.0-r1 fixes 18 vulnerabilities: ghsa-7fxm-f474-hf8w, ghsa-q78c-gwqw-jcmc, CVE-2023-3676, CVE-2023-3955, ghsa-hq6q-c2x6-hmch...

CLEANSTART-2026-WQ02691 Security fixes in tigera-operator 1.42.3-r1

Package tigera-operator version 1.42.3-r1 fixes 2 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-IJ26025 Security fixes in metrics-server 0.8.1-r3

Package metrics-server version 0.8.1-r3 fixes 13 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-42151, CVE-2026-42154...