GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kapp-controller, keda, kube-rbac-proxy, k3s, argocd-image-updater, azure-service-operator, cluster-api-gcp-controller, rke2-cloud-provider, tekton-pipelines, descheduler, cert-manager-webhook-pdns, grafana, kube-state-metrics, rancher-agent, metallb,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, falcosidekick, kserve, cortex-fips, trufflehog-fips, ops-agent, kubescape-operator-fips, vault-secrets-webhook, kine, argo-workflows, tekton-pipelines, azurefile-csi-fips, kwok, verticadb-operator-fips, dagger, envoy-gateway-fips,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, cis-operator, k3s, omnibump, sftpgo-plugin-pubsub, amazon-cloudwatch-agent-operator, aws-node-termination-handler, db-operator, kube-state-metrics, cortex, hcloud, nri-apache, grafana-mimir, kubeflow, containerd, govulncheck,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: git-lfs, k3s, k8sgateway, sftpgo-plugin-pubsub, azure-service-operator, amazon-cloudwatch-agent-operator, timescaledb-parallel-copy, nats-top, db-operator, s5cmd, kubernetes-dashboard-api, cortex, fluxcd-kustomize-mutating-webhook, go-licenses, kubeflow, swagger,...

CLEANSTART-2026-QJ30083 Security fixes in cass-operator 1.28.1-r1

Package cass-operator version 1.28.1-r1 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-CD54928 Security fixes in cass-operator-fips 1.30.0-r1

Package cass-operator-fips version 1.30.0-r1 fixes 25 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-hfvc-g4fc-pqhx, CVE-2026-29181, CVE-2026-39883, CVE-2026-39820...

CLEANSTART-2026-MI25271 Security fixes in cass-operator 1.28.1-r0

Package cass-operator version 1.28.1-r0 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2025-68121, CVE-2025-61732, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-YE67255 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1, 1.28.1-r2

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EM89202 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-YH23797 Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1

Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MW24969 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1, 1.28.1-r2

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BA09462 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-CP95927 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, amazon-cloudwatch-agent-operator, crane, regclient, cortex, go-licenses, sbom-scorecard, emissary, croc, q, tekton-chains, kaniko, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, timoni, nri-memcached, nri-rabbitmq,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, amazon-cloudwatch-agent-operator, crane, regclient, cortex, go-licenses, sbom-scorecard, emissary, croc, q, tekton-chains, kaniko, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, timoni, nri-memcached, nri-rabbitmq,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: argo-cd, kubernetes-replicator-fips, falcosidekick, knative-operator, cortex-fips, splunk-otel-collector, libnvidia-container, dynamic-localpv-provisioner, cloud-sql-proxy-fips, node-problem-detector-fips, kube-rbac-proxy-fips, flux-image-reflector-controller, kapp,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, crane, regclient, cortex, go-licenses, sbom-scorecard, emissary, croc, q, kaniko, litestream, petname, timoni, cloud-provider-aws, docker-compose, metacontroller, nri-rabbitmq, k8ssandra-client, openbao-k8s, argo-events, mockgen,...