CLEANSTART-2026-TH50881 Security fixes in aws-network-policy-agent-fips 1.3.2-r0

Package aws-network-policy-agent-fips version 1.3.2-r0 fixes 21 vulnerabilities: ghsa-xmrv-pmrh-hhx2, CVE-2026-25681, CVE-2026-42502, CVE-2026-42504, CVE-2026-42505...

CLEANSTART-2026-LM86108 Security fixes in percona-xtradb-cluster-operator-fips 1.16.1-r0

Package percona-xtradb-cluster-operator-fips version 1.16.1-r0 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-PX32512 Security fixes in tekton-pipelines 1.9.2-r0

Package tekton-pipelines version 1.9.2-r0 fixes 10 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186, ghsa-mh2q-q3fh-2475, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-EH19903 Security fixes in kyverno-fips 1.18.0-r0

Package kyverno-fips version 1.18.0-r0 fixes 2 vulnerabilities: CVE-2026-32952, ghsa-pjcq-xvwq-hhpj...

CLEANSTART-2026-KK78041 Security fixes in weaviate 1.35.2-r0

Package weaviate version 1.35.2-r0 fixes 5 vulnerabilities: ghsa-j5w8-q4qc-rx2x, CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

CLEANSTART-2026-ZQ33437 Security fixes in stakater-reloader 1.4.13-r0

Package stakater-reloader version 1.4.13-r0 fixes 2 vulnerabilities: CVE-2025-47911, CVE-2025-58190...

CLEANSTART-2026-FP92201 Security fixes in secrets-store-csi-driver-provider-gcp 1.15.0-r1

Package secrets-store-csi-driver-provider-gcp version 1.15.0-r1 fixes 21 vulnerabilities: CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830...

CLEANSTART-2026-RO94854 Security fixes in cert-manager-fips 1.18.3-r0

Package cert-manager-fips version 1.18.3-r0 fixes 3 vulnerabilities: CVE-2025-47913, CVE-2025-58181, CVE-2025-47914...

CLEANSTART-2026-II62284 Security fixes in k8ssandra-operator-fips 1.29.0-r1

Package k8ssandra-operator-fips version 1.29.0-r1 fixes 34 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186, CVE-2026-25679, CVE-2026-39820, CVE-2025-61726...

CLEANSTART-2026-RZ67002 Security fixes in opentofu-fips 1.10.9-r2

Package opentofu-fips version 1.10.9-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CVE-2026-17821

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...

EUVD-2025-210553

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...

PT-2026-66593

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum...

CVE-2025-69938

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

CVE-2026-59919 Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...

CVE-2026-52791 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

CVE-2026-52791

Fuse-overlayfs (overlayfs in FUSE for rootless containers) before version 1.17 on the release-1.x C branch preserves SUID/SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file. This may allow a low-privilege process to leave the upper-layer file with mode 4777. T...

UBUNTU-CVE-2026-67217

cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in applypatch in cJSONUtils.c. For a replace operation that is missing its value member, or a move operation whose destination path cannot be resolved, the existing target member is detached and deleted before the operatio...

SUSE SLES16 Security Update : alloy (SUSE-SU-2026:22946-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22946-1 advisory. This update for alloy fixes the following issue: Update to version 1.17.1. Security issue fixed: - CVE-2026-10722: github.com/cilium/ebpf:...