CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kubernetes-secret-generator, contour, openbao-k8s-fips, yunikorn-k8shim, authservice-fips, flux-operator, kubescape-operator-fips, seaweedfs, loki-fips, helm-diff-fips, otel-cli, kubescape, external-dns-fips, crossplane-aws-provider, crossplane-provider-aws-ecs,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubernetes-secret-generator, loki-fips, otel-cli, kubescape, cert-exporter-fips, kwok, ctop, kubeflow-fips, docker-credential-gcr, fluxcd-kustomize-mutating-webhook-fips, knative-serving-fips, certificate-transparency, hubble-ui, grpc-health-probe, cadence-fips, minc...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: kubernetes-secret-generator, contour, openbao-k8s-fips, yunikorn-k8shim, authservice-fips, flux-operator, kubescape-operator-fips, seaweedfs, loki-fips, helm-diff-fips, otel-cli, kubescape, external-dns-fips, crossplane-aws-provider, crossplane-provider-aws-ecs,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kubernetes-secret-generator, contour, openbao-k8s-fips, yunikorn-k8shim, authservice-fips, flux-operator, kubescape-operator-fips, seaweedfs, loki-fips, helm-diff-fips, otel-cli, kubescape, external-dns-fips, crossplane-aws-provider, crossplane-provider-aws-ecs,...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SQ18258 url

Multiple security vulnerabilities affect the minio-operator-fips package. url. See references for individual vulnerability details...

CLEANSTART-2026-BA09462 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-UF78567 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the minio-operator-fips package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

CLEANSTART-2026-UQ00642 Docker CLI for Windows searches for plugin binaries in C:\\ProgramData\\Docker\\cli-plugins, a directory that does not exist by default

Multiple security vulnerabilities affect the minio-operator-fips package. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...

CLEANSTART-2026-ST75560 During the TLS 1

Multiple security vulnerabilities affect the minio-operator-fips package. During the TLS 1. See references for individual vulnerability details...

CLEANSTART-2026-OT38160 url

Multiple security vulnerabilities affect the minio-operator-fips package. url. See references for individual vulnerability details...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: rekor, dapr, commercial-grafana, loki-fips, cluster-api-aws-controller-fips, guac, buildkitd-fips, crossplane-provider-aws-elasticache, kubescape, cg, wolfictl, crossplane-aws-provider, crossplane-provider-aws-ecs, kubeflow-pipelines, cloudbeat-fips, opentofu-fips,...

CLEANSTART-2026-WI06218 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.15.1-r0

Multiple security vulnerabilities affect the postgres-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KT25851 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.87.0-r0, 0.87.0-r1, 0.88.0-r1

Multiple security vulnerabilities affect the prometheus-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BP32212 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 0.87.0-r0, 0.87.0-r1, 0.88.0-r0

Multiple security vulnerabilities affect the prometheus-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RE45064 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 5.0.18-r7

Multiple security vulnerabilities affect the minio-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KW35511 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24515, CVE-2026-25210, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 5.0.18-r6, 5.0.18-r7

Multiple security vulnerabilities affect the minio-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZB99802 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-66jq-2c23-2xh5, ghsa-9h8m-3fm2-qjrq applied in versions: 0.65.0-r0, 0.65.0-r1, 0.65.0-r2

Multiple security vulnerabilities affect the victoriametrics-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...