PT-2026-101131

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101390

Security vulnerability affects the victoriametrics-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100357

Security vulnerability affects the tigera-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101249

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100467

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

EulerOS Virtualization 2.11.1 : perl (EulerOS-SA-2026-3450)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including...

PT-2026-99828

Multiple security vulnerabilities affect the eck-operator package. A norm. See references for individual vulnerability details...

PT-2026-102178

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100445

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101880

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101375

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100595

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

Security Bulletin: Spring Framework (spring-expression) — Denial of Service via SpEL Power Operator

Summary spring-expression-6.2.19.jar detected by Mend scanner in db2-service-java/pom.xml. The affected version 6.2.19 is vulnerable to CVE-2026-47886 where applications evaluating user-supplied Spring Expression Language SpEL expressions using the power operator ^ with a BigDecimal or BigInteger...

CVE-2026-54495

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a FeatureFlagSource or...

CVE-2026-54495

CVE-2026-54495 affects the OpenFeature Operator (version 0.9.2 and earlier). A tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with {NAMESPACE}/{NAME} syntax to reference a FeatureFlagSource or InProcessConfiguration in another namespace....

CVE-2026-54495 Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a FeatureFlagSource or...

CVE-2026-54495

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a FeatureFlagSource or...

EUVD-2026-82405

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a FeatureFlagSource or...

CVE-2026-54495 Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a FeatureFlagSource or...

CVE-2026-54495 Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a FeatureFlagSource or...