CLEANSTART-2026-YH23797 Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1

Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MW24969 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1, 1.28.1-r2

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BA09462 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-CP95927 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, protoc-gen-go-grpc, kserve-modelmesh-serving, actions-runner-controller, dagdotdev, kubernetes-dashboard, minio-operator, nri-rabbitmq, docker-credential-ecr-login, git-credential-oauth, gobump, checksec, opentelemetry-collector, extism,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, protoc-gen-go-grpc, kserve-modelmesh-serving, actions-runner-controller, dagdotdev, kubernetes-dashboard, minio-operator, nri-rabbitmq, docker-credential-ecr-login, git-credential-oauth, gobump, checksec, opentelemetry-collector, extism,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, elvish, rabbitmq-default-user-credential-updater, ytt-fips, docker-cli-buildx-fips, nginx-prometheus-exporter-fips, amazon-cloudwatch-agent-operator, cluster-proportional-autoscaler-fips, minio-operator-fips, argo-cd-fips, policy-controller, cargobump,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, crossplane-provider-aws, protoc-gen-go-grpc, kserve-modelmesh-serving, actions-runner-controller, dagdotdev, neuvector-sigstore-interface, descheduler, nri-rabbitmq, docker-credential-ecr-login, terraform-docs, git-credential-oauth, gobump...