CLEANSTART-2026-CG99434 Security fixes for CVE-2025-12383, CVE-2025-68161, CVE-2026-22022, CVE-2026-22444, CVE-2026-24281, CVE-2026-24308, CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-34481, ghsa-3pxv-7cmr-fjr4, ghsa-3qp7-7mw8-wx86, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-7p63-w6x9-6gr7, ghsa-h383-gmxw-35v2, ghsa-qr3p-2xj2-q7hq, ghsa-vc2w-4v3p-2mqw, ghsa-vc5p-v9hr-52mj, ghsa-w35j-pv5h-q9q9, ghsa-w573-9ffj-6ff9, ghsa-x4gw-5cx5-pgmh applied in versions: 9.10.1-r1, 9.8.1-r0, 9.9.0-r0

Multiple security vulnerabilities affect the solr package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CQ01177 Security fixes for CVE-2024-38828, CVE-2024-6763, CVE-2025-11143, CVE-2026-2332, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-49268, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-qh8g-58pp-2wxh, ghsa-w3c8-7r8f-9jp8, ghsa-x96m-rh44-vgv8 applied in versions: 5.19.3-r0, 5.19.3-r1, 6.2.6-r0

Multiple security vulnerabilities affect the activemq package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QU98532 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-35206, ghsa-f6x5-jh6r-wrfv, ghsa-hr2v-4r36-88hr, ghsa-j5w8-q4qc-rx2x, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 0.8.10-r0, 0.8.11-r0, 0.8.4-r0

Multiple security vulnerabilities affect the k8ssandra-client-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.30 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.30 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

CLEANSTART-2026-AD30368 Security fixes for CVE-2026-2303, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-cp6g-7hqx-qxhp applied in versions: 1.38.1-r0

Multiple security vulnerabilities affect the weaviate-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KQ90880 Security fixes for CVE-2025-13281, CVE-2025-4563, CVE-2025-47912, CVE-2025-5187, CVE-2025-55190, CVE-2025-55191, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-59537, CVE-2025-59538, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2026-2303, CVE-2026-44740, CVE-2026-44973, CVE-2026-45022, CVE-2026-45570, CVE-2026-45571, ghsa-2v5j-vhc3-9cwm, ghsa-2vgg-9h3w-qbr4, ghsa-2xsj-vh29-9cwm, ghsa-37cx-329c-33x3, ghsa-389r-gv7p-r3rp, ghsa-3wgm-2mw2-vh5m, ghsa-4x4m-3c2p-qppc, ghsa-6v2p-p543-phr9, ghsa-92cp-5422-2m47, ghsa-93mq-9ffx-83m2, ghsa-cp6g-7hqx-qxhp, ghsa-crhj-59gh-8x96, ghsa-f6x5-jh6r-wrfv, ghsa-gxhx-2686-5h9g, ghsa-hj2p-8wj8-pfq4, ghsa-j5w8-q4qc-rx2x, ghsa-m3xc-h892-ggx6, ghsa-m7cr-m3pv-hgrp, ghsa-mh63-6h87-95cp, ghsa-mw99-9chc-xw7r, ghsa-qw64-3x98-g7q2, ghsa-w5pp-99ch-qj29 applied in versions: 2.13.9-r0, 2.14.20-r0, 3.0.16-r0, 3.0.19-r0, 3.1.12-r0, 3.1.4-r0, 3.1.8.-r0, 3.1.9-r4, 3.2.12-r0, 3.2.7-r0

Multiple security vulnerabilities affect the argo-cd package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ES72297 Security fixes for CVE-2025-13281, CVE-2025-4563, CVE-2025-47912, CVE-2025-5187, CVE-2025-55190, CVE-2025-55191, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-59537, CVE-2025-59538, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2026-2303, CVE-2026-44740, CVE-2026-44973, CVE-2026-45022, CVE-2026-45570, CVE-2026-45571, ghsa-2v5j-vhc3-9cwm, ghsa-2vgg-9h3w-qbr4, ghsa-2xsj-vh29-9cwm, ghsa-37cx-329c-33x3, ghsa-389r-gv7p-r3rp, ghsa-3wgm-2mw2-vh5m, ghsa-4x4m-3c2p-qppc, ghsa-6v2p-p543-phr9, ghsa-92cp-5422-2m47, ghsa-93mq-9ffx-83m2, ghsa-cp6g-7hqx-qxhp, ghsa-crhj-59gh-8x96, ghsa-f6x5-jh6r-wrfv, ghsa-gxhx-2686-5h9g, ghsa-hj2p-8wj8-pfq4, ghsa-j5w8-q4qc-rx2x, ghsa-m3xc-h892-ggx6, ghsa-m7cr-m3pv-hgrp, ghsa-mh63-6h87-95cp, ghsa-mw99-9chc-xw7r, ghsa-qw64-3x98-g7q2, ghsa-w5pp-99ch-qj29 applied in versions: 2.13.9-r0, 2.14.20-r0, 3.0.16-r0, 3.0.19-r0, 3.1.12-r0, 3.1.4-r0, 3.1.8.-r0, 3.1.9-r4, 3.2.7-r0, 3.3.11-r0

Multiple security vulnerabilities affect the argo-cd package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DD95169 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-6357, ghsa-58qw-9mgm-455v, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.7.1-r0

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YY96069 Security fixes for CVE-2025-59250, CVE-2026-0636, CVE-2026-33870, CVE-2026-33871, CVE-2026-39852, CVE-2026-41417, CVE-2026-42198, CVE-2026-42577, CVE-2026-42578, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-44249, CVE-2026-44893, CVE-2026-45416, CVE-2026-45536, CVE-2026-45673, CVE-2026-45674, CVE-2026-47244, CVE-2026-47691, CVE-2026-48043, CVE-2026-48059, CVE-2026-50010, CVE-2026-50020, CVE-2026-50560, CVE-2026-5588, CVE-2026-5598, ghsa-3qp7-7mw8-wx86, ghsa-563q-j3cm-6jxm, ghsa-5pvg-856g-cp85, ghsa-5x3r-wrvg-rp6q, ghsa-676x-f7gg-47vc, ghsa-72hv-8253-57qq, ghsa-98qh-xjc8-98pq, ghsa-c2gf-v879-257j, ghsa-c3fc-8qff-9hwx, ghsa-c653-97m9-rcg9, ghsa-cc37-9q2j-3hfv, ghsa-h2qv-fj59-j46j, ghsa-hvcg-qmg6-jm4c, ghsa-p93r-85wp-75v3, ghsa-pwqr-wmgm-9rr8, ghsa-rc95-pcm8-65v9, ghsa-v8h7-rr48-vmmv, ghsa-w573-9ffj-6ff9, ghsa-w9fj-cfpg-grvv, ghsa-wg6q-6289-32hp, ghsa-x4gw-5cx5-pgmh, ghsa-xmv7-r254-6q78 applied in versions: 26.5.6-r3, 26.6.1-r1, 26.6.3-r2

Multiple security vulnerabilities affect the keycloak package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KN24948 Security fixes for CVE-2021-43616, CVE-2026-11525, CVE-2026-12151, CVE-2026-13149, CVE-2026-23745, CVE-2026-23950, CVE-2026-24001, CVE-2026-25547, CVE-2026-26960, CVE-2026-26996, CVE-2026-27903, CVE-2026-27904, CVE-2026-31802, CVE-2026-45149, CVE-2026-53655, CVE-2026-6733, CVE-2026-9358, CVE-2026-9496, CVE-2026-9679, ghsa-35p6-xmwp-9g52, ghsa-3ppc-4f35-3m26, ghsa-83g3-92jg-28cx, ghsa-g8m3-5g58-fq7m, ghsa-jxxr-4gwj-5jf2, ghsa-p88m-4jfj-68fv, ghsa-qffp-2rhf-9h96, ghsa-vxpw-j846-p89q applied in versions: 11.10.0-r1, 11.10.0-r2, 11.11.0-r0, 11.11.0-r1, 11.11.0-r2, 11.14.0-r0, 11.14.0-r2, 11.14.0-r3, 11.17.0-r1, 11.17.0-r2, 11.18.0-r0, 11.7.0-r0, 11.8.0-r0, 8.1.4-r0

Multiple security vulnerabilities affect the npm package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MP41051 Security fixes for CVE-2025-22227, CVE-2025-48924, ghsa-4q2v-9p7v-3v22, ghsa-j288-q9x7-2f5v applied in versions: 9.3.5-r0

Multiple security vulnerabilities affect the elasticsearch package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WY21381 Security fixes for CVE-2023-45288, CVE-2025-15558, CVE-2026-25680, CVE-2026-25681, CVE-2026-26958, CVE-2026-27136, CVE-2026-27145, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-33815, CVE-2026-33816, CVE-2026-34986, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39882, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-44740, CVE-2026-44973, CVE-2026-45022, CVE-2026-45570, CVE-2026-45571, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-389r-gv7p-r3rp, ghsa-3xc5-wrhm-f963, ghsa-78h2-9frx-2jm8, ghsa-crhj-59gh-8x96, ghsa-fw7p-63qq-7hpr, ghsa-hfvc-g4fc-pqhx, ghsa-j88v-2chj-qfwx, ghsa-m3xc-h892-ggx6, ghsa-m7cr-m3pv-hgrp, ghsa-p436-gjf2-799p, ghsa-qw64-3x98-g7q2, ghsa-w5pp-99ch-qj29, ghsa-w8rr-5gcm-pp58 applied in versions: 3.7.15-r0, 4.0.1-r0, 4.0.2-r0, 4.0.3-r0, 4.0.4-r0, 4.0.4-r1, 4.0.5-r0

Multiple security vulnerabilities affect the argo-workflows package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL87201 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 1.18.1-r0

Multiple security vulnerabilities affect the velero package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SX09346 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 1.17.2-r3

Multiple security vulnerabilities affect the velero package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JT42679 Security fixes for CVE-2025-61729, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27137, CVE-2026-27138, CVE-2026-27142, CVE-2026-27145, CVE-2026-39821, CVE-2026-39822, CVE-2026-42502, CVE-2026-42504, CVE-2026-42505, CVE-2026-42506, CVE-2026-42507, CVE-2026-46600, CVE-2026-56852 applied in versions: 0.20.2-r1, 0.22.1-r2, 0.24.0-r0

Multiple security vulnerabilities affect the trust-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UM67329 Security fixes for CVE-2025-61729, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39822, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42505, CVE-2026-56852, ghsa-p77j-4mvh-x3m3 applied in versions: 0.9.2-r0, 1.0.1-r0, 1.1.0-r0

Multiple security vulnerabilities affect the kube-vip package. These issues are resolved in later releases. See references for individual vulnerability details...

EUVD-2026-45917

SurrealDB versions before 3.1.0 fail to enforce table SELECT permissions when traversing graph edges or back-references. Authenticated users can read records from any table reachable through graph edges regardless of the target table's PERMISSIONS FOR select clause...

CVE-2026-63738 SurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via Traversal

SurrealDB versions 3.1.0 before 3.1.5 fail to enforce field-level SELECT permissions when records are accessed through graph-edge or back-reference traversals. Attackers with table-level SELECT access can read field values hidden by field-level permissions by materializing records through graph...

PT-2026-61554

Name of the Vulnerable Software and Affected Versions SurrealDB versions 3.1.0 through 3.1.4 Description An issue exists where field-level SELECT permissions are not enforced when records are accessed via graph-edge or back-reference traversals. Users with table-level SELECT access can bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-53378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob...