GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, eksctl, harbor-registry, kubernetes-dashboard-auth, buildkitd, cluster-api-helm-controller, docker-cli-buildx, kuberlr, nri-memcached, spire-controller-manager, docker-credential-gcr, cloud-provider-vsphere, controller-gen, ko, gobuster, dive, nri-consu...

CLEANSTART-2026-QR05590 Security fixes in clickhouse-operator 0.25.5-r0

Package clickhouse-operator version 0.25.5-r0 fixes 2 vulnerabilities: CVE-2025-22868, CVE-2025-22870...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, fluxcd-kustomize-mutating-webhook, mountpoint-s3-csi-driver, aws-network-policy-agent, grafana-operator, goreleaser, pluto, mariadb-operator, kubewatch, temporal, victoriametrics, envoy-ratelimit, flux, aws-load-balancer-controller,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, eksctl, harbor-registry, crossplane-provider-aws-eks, gogatekeeper, kube-metrics-adapter, weaviate, buildkitd, cluster-api-helm-controller, docker-cli-buildx, crossplane-provider-aws-firehose, step-ca, argocd-image-updater,...

CLEANSTART-2026-DN29911 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Security vulnerability affects the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CLEANSTART-2025-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM16286 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...