CLEANSTART-2026-MV81821 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-44903, ghsa-8rm2-7qqf-34qm, ghsa-fw8g-cg8f-9j28, ghsa-mh2q-q3fh-2475, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 0.87.1-r0, 0.87.1-r1, 0.87.1-r2, 0.87.1-r3

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LG79681 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-mh2q-q3fh-2475 applied in versions: 0.87.1-r0, 0.89.0-r0, 0.89.0-r1

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OD56729 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-mh2q-q3fh-2475 applied in versions: 0.87.1-r0, 0.88.1-r0, 0.89.0-r0

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CH40794 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 0.87.1-r0, 0.89.0-r0, 0.90.1-r0

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YH23797 Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1

Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-45760: Externally Controlled Reference to a Resource in Another Sphere

Externally Controlled Reference to a Resource in Another Sphere, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: nfpm, nuclei, pulumi-language-java, snyk-cli, kaniko, rancher-fleet, teleport, gitlab-runner, kubescape, witness, apko, kots, skaffold, syft, external-secrets-operator, crossplane, gitaly, steampipe, zot, melange, argo-cd, gptscript, kargo, scorecard, gitea,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: nfpm, nuclei, pulumi-language-java, snyk-cli, kaniko, rancher-fleet, teleport, gitlab-runner, kubescape, witness, apko, kots, skaffold, syft, external-secrets-operator, crossplane, gitaly, steampipe, zot, melange, argo-cd, gptscript, kargo, scorecard, gitea,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: nfpm, nuclei, pulumi-language-java, snyk-cli, kaniko, rancher-fleet, teleport, gitlab-runner, kubescape, witness, apko, kots, skaffold, syft, external-secrets-operator, crossplane, gitaly, steampipe, zot, melange, argo-cd, gptscript, kargo, scorecard, gitea,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: nfpm, nuclei, pulumi-language-java, snyk-cli, kaniko, rancher-fleet, teleport, gitlab-runner, kubescape, witness, apko, kots, skaffold, syft, external-secrets-operator, crossplane, gitaly, steampipe, zot, melange, argo-cd, gptscript, kargo, scorecard, gitea,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: src-fingerprint, gitea, argo-workflows-fips, pulumi-kubernetes-operator, guac, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, chainloop-cli, flux-fips, wolfictl, kots, chainctl, nemo, cerbos-fips, argocd-image-updater-fips, kubescape, trivy-operator, snyk-cli...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: src-fingerprint, gitea, argo-workflows-fips, pulumi-kubernetes-operator, guac, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, chainloop-cli, flux-fips, wolfictl, kots, chainctl, nemo, cerbos-fips, argocd-image-updater-fips, kubescape, trivy-operator, snyk-cli...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: src-fingerprint, gitea, argo-workflows-fips, pulumi-kubernetes-operator, guac, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, chainloop-cli, flux-fips, wolfictl, kots, chainctl, nemo, cerbos-fips, argocd-image-updater-fips, kubescape, trivy-operator, snyk-cli...

GO-2026-4996 Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in github.com/grafana/tempo-operator

Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in github.com/grafana/tempo-operator...

Malicious code in vlifegram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8771013473b84f29159a80ec15ce3e9897bc69908ddfa2438845811dd276d87c VLifeGram is published under its own name on PyPI but installs into the pyrogram/ namespace and ships a Pyrogram fork at version 2.1.2.4. It adds an...

EUVD-2026-31140

In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted through srchFilter configurations on custom roles.The app contains an authorize.conf configuration file with a srchFilter entry that...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.12 Images Security Update

New images are available for Red Hat build of Keycloak 26.4.12 and Red Hat build of Keycloak 26.4.12 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.16 Images Security Update

New images are available for Red Hat build of Keycloak 26.2.16 and Red Hat build of Keycloak 26.2.16 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

PT-2026-42380

Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in github.com/grafana/tempo-operator...

Malicious code in clsx-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e4e85f63d161234d84c774fdff696827934a27282be2ce9ff362a756246ee6 On npm install, dist/postinstall.js base64-decodes the URL https://api.npoint.io/984b75c022a70cf00c39, fetches JSON from this anonymous mutable...