GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-ipam-provider-in-cluster, spicedb, datadog-operator, telegraf, rancher-system-agent, emissary, kubescape, cluster-api-gcp-controller, zot, kubernetes-csi-external-snapshotter, datadog-agent, kyverno, metallb, kuma, kubernetes-csi-external-health-monitor,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno, policy-controller, gcp-compute-persistent-disk-csi-driver, loki, apm-server-fips, falcoctl-fips, kyverno, ceph-csi-operator-fips, k8sgateway, otel-cli, tfsec, azure-service-operator, cluster-api-gcp-controller-fips, grafana,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: redpanda, podinfo, migrate, kbld, emissary, manifest-tool, spire-server, crossplane-provider-aws-route53, crossplane-provider-aws-cloudformation, envoy-gateway, actions-runner-controller, node-problem-detector, wuzz, zarf, cloud-provider-azure, cloud-provider-aws,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: nri-mongodb, podinfo, kbld, neuvector-sigstore-interface, manifest-tool, nri-f5, spire-server, git-sync, terraform-mcp-server, crossplane-provider-aws-cloudformation, s5cmd, dex, terraform-provider-time, actions-runner-controller, wuzz,...

CLEANSTART-2026-CD54928 Security fixes in cass-operator-fips 1.30.0-r1

Package cass-operator-fips version 1.30.0-r1 fixes 25 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-hfvc-g4fc-pqhx, CVE-2026-29181, CVE-2026-39883, CVE-2026-39820...

CLEANSTART-2026-QJ30083 Security fixes in cass-operator 1.28.1-r1

Package cass-operator version 1.28.1-r1 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-MI25271 Security fixes in cass-operator 1.28.1-r0

Package cass-operator version 1.28.1-r0 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2025-68121, CVE-2025-61732, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-YE67255 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1, 1.28.1-r2

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EM89202 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-YH23797 Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1

Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MW24969 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1, 1.28.1-r2

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BA09462 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-CP95927 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: k6, kbld, oauth2-proxy, terraform-provider-tls, spire-server, envoy-gateway, terraform-provider-time, rabbitmq-messaging-topology-operator, maru, sbom-convert, dgraph, gosu, go-licenses, jitsucom-jitsu, gh, volume-modifier-for-k8s, memcached-exporter,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: k6, kbld, oauth2-proxy, terraform-provider-tls, spire-server, envoy-gateway, terraform-provider-time, rabbitmq-messaging-topology-operator, maru, sbom-convert, dgraph, gosu, go-licenses, jitsucom-jitsu, gh, volume-modifier-for-k8s, memcached-exporter,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, policy-controller, wait-for-port, kapp, flux-fips, xcaddy, gcp-compute-persistent-disk-csi-driver, falco-exporter, falcoctl-fips, kyverno, jsonnet-bundler, dex, gh, external-secrets-fips, emissary, incert, azure-service-operator,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: k6, kbld, neuvector-sigstore-interface, harbor-cli, oauth2-proxy, php-fpmexporter, spire-server, grpc-health-probe, rabbitmq-messaging-topology-operator, sbom-convert, gosu, go-licenses, volume-modifier-for-k8s, atlantis, memcached-exporter, velero-plugin-for-csi,...