59387 matches found
CVE-2026-18378
A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token the default, the cluster-global Red Hat Cloud pull-secret bearer token is attached to...
EUVD-2026-51093
A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...
CVE-2026-18381 Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address
A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...
CVE-2026-18381
The CVE-2026-18381 affects the koku-metrics-operator used with Red Hat OpenShift. A flaw in the CostManagementMetricsConfig custom resource lets an authorized user edit the CR to specify an arbitrary upload URL. The operator then attaches its Kubernetes service-account bearer token to queries sen...
CVE-2026-18381 Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address
A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...
CVE-2026-18381
A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...
CVE-2026-44097
A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service...
CLEANSTART-2026-ZX59706 Security fixes in grafana-rollout-operator 0.36.0-r0
Package grafana-rollout-operator version 0.36.0-r0 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...
CLEANSTART-2026-CC85180 Security fixes in rabbitmq-cluster-operator 2.20.0-r1
Package rabbitmq-cluster-operator version 2.20.0-r1 fixes 13 vulnerabilities: CVE-2026-27143, ghsa-pc3f-x583-g7j2, CVE-2026-32281, CVE-2026-32280, CVE-2026-32283...
CLEANSTART-2026-JO67014 Security fixes in minio-operator 7.0.1-r5
Package minio-operator version 7.0.1-r5 fixes 4 vulnerabilities: CVE-2025-22868, ghsa-6v2p-p543-phr9, CVE-2025-15558, ghsa-p436-gjf2-799p...
CLEANSTART-2026-ZW36129 Security fixes in prometheus-operator-fips 0.87.0-r0
Package prometheus-operator-fips version 0.87.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-DU91770 Security fixes in tigera-operator 1.41.1-r0
Package tigera-operator version 1.41.1-r0 fixes 34 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-27143, CVE-2026-33186, CVE-2026-39820, CVE-2026-25679...
CLEANSTART-2026-UX09480 Security fixes in percona-xtradb-cluster-operator 1.18.0-r2
Package percona-xtradb-cluster-operator version 1.18.0-r2 fixes 1 vulnerabilities: CVE-2026-26958...
CLEANSTART-2026-SE63944 Security fixes in percona-xtradb-cluster-operator-fips 1.19.0-r1
Package percona-xtradb-cluster-operator-fips version 1.19.0-r1 fixes 3 vulnerabilities: ghsa-gx3x-vq4p-mhhv, CVE-2025-68121, CVE-2025-61732...
CLEANSTART-2026-MO12071 Security fixes in grafana-agent-operator 0.44.8-r0
Package grafana-agent-operator version 0.44.8-r0 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...
CLEANSTART-2026-IB41963 Security fixes in percona-xtradb-cluster-operator 1.18.0-r1
Package percona-xtradb-cluster-operator version 1.18.0-r1 fixes 8 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119...
CLEANSTART-2026-IL03064 Security fixes in minio-operator 6.0.4-r3
Package minio-operator version 6.0.4-r3 fixes 4 vulnerabilities: ghsa-mh63-6h87-95cp, ghsa-29wx-vh33-7x7r, CVE-2025-30204, CVE-2024-51744...
CLEANSTART-2026-CD54928 Security fixes in cass-operator-fips 1.30.0-r1
Package cass-operator-fips version 1.30.0-r1 fixes 25 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-hfvc-g4fc-pqhx, CVE-2026-29181, CVE-2026-39883, CVE-2026-39820...
CLEANSTART-2026-CI65568 Security fixes in minio-operator-fips 7.1.1-r10
Package minio-operator-fips version 7.1.1-r10 fixes 11 vulnerabilities: CVE-2026-39836, CVE-2026-33811, CVE-2026-33814, CVE-2026-42499, CVE-2026-39820...