61513 matches found
CLEANSTART-2026-AH40201 Security fixes in strimzi-kafka-operator 1.2.0-r2
Package strimzi-kafka-operator version 1.2.0-r2 fixes 1 vulnerabilities: CVE-2025-12183...
CLEANSTART-2026-ZW26373 Security fixes in tigera-operator-fips 1.38.16-r2
Package tigera-operator-fips version 1.38.16-r2 fixes 8 vulnerabilities: CVE-2026-53713, CVE-2026-53714, CVE-2026-53715, CVE-2026-53716, CVE-2026-53717...
CLEANSTART-2026-CW06250 Security fixes in rabbitmq-cluster-operator 2.22.4-r0
Package rabbitmq-cluster-operator version 2.22.4-r0 fixes 8 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...
CLEANSTART-2026-ZE35909 Security fixes in tigera-operator-fips 1.38.16-r1
Package tigera-operator-fips version 1.38.16-r1 fixes 7 vulnerabilities: CVE-2026-53713, CVE-2026-53714, CVE-2026-53715, CVE-2026-53716, CVE-2026-53717...
CLEANSTART-2026-LI34904 Security fixes in strimzi-kafka-operator 1.2.0-r1
Package strimzi-kafka-operator version 1.2.0-r1 fixes 2 vulnerabilities: CVE-2026-59949, CVE-2026-59903...
CLEANSTART-2026-WA25987 Security fixes in kuberay-operator 1.6.2-r1
Package kuberay-operator version 1.6.2-r1 fixes 11 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...
CLEANSTART-2026-VJ20703 Security fixes in postgres-operator 1.15.1-r1
Package postgres-operator version 1.15.1-r1 fixes 24 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...
CLEANSTART-2026-KN37545 Security fixes in kuberay-operator 1.3.2-r3
Package kuberay-operator version 1.3.2-r3 fixes 13 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...
CVE-2026-73732: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to obtain sensitive information. Successful exploitation could allow an attacker to retrieve sensitive data which could be used to gain...
PT-2026-89977
Package external-secrets-operator version 2.9.0-r0 fixes 1 vulnerabilities: ghsa-gcjh-h69q-9w9g...
CVE-2026-73746: Uncontrolled Resource Consumption
A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...
CVE-2026-73744: Uncontrolled Resource Consumption
A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to disrupt the availability of the affected...
CVE-2026-73742: Authentication Bypass by Spoofing
A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...
CVE-2026-73735: Files or Directories Accessible to External Parties
Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some information beyond their privilege level. Successful exploitation could allow an attacker to obtain limited information and/or make limited changes beyond what is...
CVE-2026-73728: Uncontrolled Resource Consumption
Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...
CVE-2026-73724: Incorrect Authorization
Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...
CVE-2026-73723: Incorrect Authorization
A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorizati...
CVE-2026-73704: Improper Neutralization of Special Elements used in a Command
A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...
CVE-2026-73700: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to...