GO-2026-6094 vulnerabilities

Vulnerabilities for packages: hubble, keda, kubernetes, crossplane, rancher, rke2-cloud-provider, gitlab-kas, yunikorn-k8shim, datadog-operator, openbao, tkn, datadog-agent, cluster-api-ipam-provider-in-cluster, tekton-pipelines, kwok, cluster-autoscaler, cluster-api-azure-controller,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, packer, cluster-api-helm-controller, ops-agent, trivy-fips, azurefile-csi, kubevirt-cdi-controller-fips, kubernetes-csi-external-provisioner-fips, seaweedfs, kube-metrics-adapter, gomplate, azure-service-operator, google-osconfig-agent, velero,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: hubble, libnvidia-container, vault-k8s, nova, kubernetes, litestream, crossplane, prometheus-adapter, steampipe, rancher, victoriametrics-cluster, newrelic-nri-kube-events, helm-push, sftpgo-plugin-pubsub, guac, sigstore-scaffolding, trino, aws-efs-csi-driver,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: hubble, pvc-autoresizer, cert-manager-cmctl, kustomize, tfsec, vault-k8s, litestream, steampipe, falcosidekick, metacontroller, dkron, sftpgo-plugin-pubsub, aws-eks-pod-identity-agent, yunikorn-k8shim, guac, docker-credential-ecr-login, ytt, minio-object-browser, kub...

CLEANSTART-2026-CD54928 Security fixes in cass-operator-fips 1.30.0-r1

Package cass-operator-fips version 1.30.0-r1 fixes 25 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-hfvc-g4fc-pqhx, CVE-2026-29181, CVE-2026-39883, CVE-2026-39820...

CLEANSTART-2026-QJ30083 Security fixes in cass-operator 1.28.1-r1

Package cass-operator version 1.28.1-r1 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-MI25271 Security fixes in cass-operator 1.28.1-r0

Package cass-operator version 1.28.1-r0 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2025-68121, CVE-2025-61732, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-YE67255 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1, 1.28.1-r2

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EM89202 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-YH23797 Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1

Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MW24969 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1, 1.28.1-r2

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BA09462 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-CP95927 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, fq, libnvidia-container, hello-world-golang, kpt, nri-jmx, sbom-convert, oras, guac, trino, docker-credential-ecr-login, ytt, tw, flux-notification-controller, docker-cli-buildx, runc, git-credential-oauth, influx, kapp, go-md2man, wav...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, fq, libnvidia-container, hello-world-golang, kpt, nri-jmx, sbom-convert, oras, guac, trino, docker-credential-ecr-login, ytt, tw, flux-notification-controller, docker-cli-buildx, runc, git-credential-oauth, influx, kapp, go-md2man, wav...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: chartmuseum, wire-go, distribution-fips, kube-logging-operator, packer, fuse-overlayfs-snapshotter, karpenter, trivy-fips, cilium, local-static-provisioner, kubernetes-csi-external-provisioner-fips, redka, crossplane-provider-keycloak, seaweedfs, kpt,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, fq, hello-world-golang, kpt, nri-jmx, sbom-convert, oras, metacontroller, trino, docker-credential-ecr-login, ytt, prometheus-operator, flux-notification-controller, runc, podman, argo-rollouts, git-credential-oauth, influx, kapp,...