GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, spicedb, rke2-cloud-provider, cert-manager-webhook-pdns, descheduler, flux-kustomize-controller, flux-helm-controller, cluster-autoscaler, argocd-image-updater, azure-service-operator, gatekeeper, rancher-webhook, kwok, cilium, tkn, kubernetes,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, terraform-fips, coredns, crossplane-provider-gcp-fips, eck-operator-fips, kong-ingress-controller, minio, ceph-csi-operator, flyte, sops, azcopy-fips, skaffold-fips, buildkitd, helm-operator-fips, ratify-fips, temporal-fips, blob-csi-fip...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, policy-controller, cortex, kube-state-metrics, nri-kubernetes, lazydocker, spire-server, docker-machine-driver-harvester, net-kourier, temporal, opa-envoy, helm-push, cert-manager-webhook-pdns, descheduler,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, aws-privateca-issuer, policy-controller, swagger, cortex, kubelet-csr-approver, juicefs, spire-server, kserve-modelmesh-serving, spire-controller-manager, crossplane-provider-sql, whereabouts, postgres-operator,...

CLEANSTART-2026-QJ30083 Security fixes in cass-operator 1.28.1-r1

Package cass-operator version 1.28.1-r1 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-CD54928 Security fixes in cass-operator-fips 1.30.0-r1

Package cass-operator-fips version 1.30.0-r1 fixes 25 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-hfvc-g4fc-pqhx, CVE-2026-29181, CVE-2026-39883, CVE-2026-39820...

CLEANSTART-2026-MI25271 Security fixes in cass-operator 1.28.1-r0

Package cass-operator version 1.28.1-r0 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2025-68121, CVE-2025-61732, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-YE67255 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1, 1.28.1-r2

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EM89202 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-YH23797 Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1

Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MW24969 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-39883, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1, 1.28.1-r2

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BA09462 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the cass-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-CP95927 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1

Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: authservice, cortex, flannel-cni-plugin, crane, sbom-convert, postgres-operator, age, k6, aws-application-networking-k8s, rancher-webhook, trino, filebrowser, kserve-rest-proxy, timoni, kube-logging-operator, velero-plugin-for-microsoft-azure, gh, haproxy-ingress,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: authservice, cortex, flannel-cni-plugin, crane, sbom-convert, postgres-operator, age, k6, aws-application-networking-k8s, rancher-webhook, trino, filebrowser, kserve-rest-proxy, timoni, kube-logging-operator, velero-plugin-for-microsoft-azure, gh, haproxy-ingress,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, victoriametrics-operator-fips, s5cmd, vertical-pod-autoscaler, nvidia-nsight-compute-12.9, terraform-provider-sendgrid, rabbitmq-default-user-credential-updater, go-licenses, dockerize, speedtest-go, regclient, elvish, gitness, nri-kafka...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: dive, cortex, flannel-cni-plugin, crane, sbom-convert, postgres-operator, age, smarter-device-manager, k6, aws-application-networking-k8s, trino, gitea, kserve-rest-proxy, timoni, atlantis, kube-logging-operator, velero-plugin-for-microsoft-azure, haproxy-ingress,...