GO-2025-3955 vulnerabilities

Vulnerabilities for packages: mongo-tools, dive, nri-redis, nova, undock, envconsul, steampipe, dex, regclient, nats-server-config-reloader, wgcf, flux, neuvector-sigstore-interface, kor, spire-controller-manager, k3s, opa, step-kms-plugin, wal-g, nri-consul, helm-operator, helm-push,...

CLEANSTART-2026-QR05590 Security fixes in clickhouse-operator 0.25.5-r0

Package clickhouse-operator version 0.25.5-r0 fixes 2 vulnerabilities: CVE-2025-22868, CVE-2025-22870...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, grafana-operator, flux-source-controller, gh, osv-scanner, hubble, secrets-store-csi-driver-provider-aws, mountpoint-s3-csi-driver, nova, victoriametrics, actions-runner-controller, omnibump, temporal, flux-image-reflector-controller,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, cilium, crossplane-provider-aws-sqs, flux-source-controller, knative-eventing, crossplane-provider-sql, dive, mcp-grafana, docker, cluster-api-aws-controller, docker-compose, gitaly, etcd, haproxy-ingress, gatekeeper, policy-controller,...

CLEANSTART-2026-DN29911 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Security vulnerability affects the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CLEANSTART-2025-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM16286 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...