CLEANSTART-2026-HR38283 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.42.0-r0

Multiple security vulnerabilities affect the tigera-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WP03591 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-33814, CVE-2026-39821, CVE-2026-39833, CVE-2026-39836, CVE-2026-42499, CVE-2026-42504, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p436-gjf2-799p applied in versions: 7.1.1-r0, 7.1.1-r1, 7.1.1-r3, 7.1.1-r4, 7.1.1-r5

Multiple security vulnerabilities affect the minio-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DV05833 Security fixes for CVE-2026-42504 applied in versions: 2.21.0-r0

Security vulnerability affects the rabbitmq-cluster-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MW66834 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.42.0-r0

Multiple security vulnerabilities affect the tigera-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AQ98798 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, CVE-2026-46680, CVE-2026-47262, CVE-2026-48978, CVE-2026-50151, CVE-2026-50162, CVE-2026-53488, ghsa-fqw6-gf59-qr4w, ghsa-jpcc-p29g-p8mq, ghsa-vh4v-2xq2-g5cg, ghsa-xhf5-7wjv-pqxp applied in versions: 1.42.0-r0, 1.42.1-r0, 1.42.1-r1

Multiple security vulnerabilities affect the tigera-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier this month. The same operator has now been spotted deploying ENCFORGE , a new compiled Go ransomware designed to encrypt model weights, vector...

CLEANSTART-2026-PY84482 Security fixes for CVE-2025-15558, CVE-2026-39822, CVE-2026-42504, CVE-2026-42505, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.8.1-r2, 1.8.1-r3, 1.8.1-r4

Multiple security vulnerabilities affect the dynatrace-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VU72808 Security fixes for CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-39821, CVE-2026-39822, CVE-2026-39883, CVE-2026-42502, CVE-2026-42505, CVE-2026-42506, CVE-2026-46600, CVE-2026-56852, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-mpwr-8vm7-h73f, ghsa-pjcq-xvwq-hhpj applied in versions: 1.1.0-r0, 2.4.1-r0, 2.5.0-r0, 2.6.0-r1, 2.6.0-r3

Multiple security vulnerabilities affect the external-secrets-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PH23874 Security fixes for CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-39821, CVE-2026-39822, CVE-2026-39883, CVE-2026-42502, CVE-2026-42505, CVE-2026-42506, CVE-2026-46600, CVE-2026-56852, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-mpwr-8vm7-h73f, ghsa-pjcq-xvwq-hhpj applied in versions: 1.1.0-r0, 2.4.1-r0, 2.5.0-r0, 2.6.0-r1, 2.6.0-r3, 2.7.0-r1

Multiple security vulnerabilities affect the external-secrets-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-62486

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with network access via HTTPS to compromise the system. This can lead to an unauthorized hang or a...

PT-2026-62490

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with network access via HTTPS to compromise the system. This can lead to unauthorized read access to...

PT-2026-62484

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to a full...

PT-2026-62485

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with network access via HTTPS to compromise the system. This can lead to an unauthorized hang or a...

PT-2026-62492

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with network access via HTTPS to compromise the system. This can result in an unauthorized partial...

PT-2026-62487

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with access to the infrastructure where the database executes to compromise the system. This issue c...

PT-2026-62611

Name of the Vulnerable Software and Affected Versions Oracle MySQL Cluster versions 8.0.0 through 8.0.47 Oracle MySQL Cluster versions 8.4.0 through 8.4.10 Oracle MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists in the NDB Operator component of Oracle MySQL Cluster. An...

PT-2026-62489

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with access to the infrastructure where the database executes to compromise the system. This issue c...

PT-2026-62483

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with access to the infrastructure where the database executes to compromise the system. This issue c...

PT-2026-62491

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw exists in the Kubernetes Operator component of the Oracle TimesTen In-Memory Database. A high-privileged attacker with access to the infrastructure where the database...

PT-2026-62488

Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a high-privileged attacker with access to the infrastructure where the database executes to compromise the system. Successful...