CLEANSTART-2026-QR05590 Security fixes in clickhouse-operator 0.25.5-r0

Package clickhouse-operator version 0.25.5-r0 fixes 2 vulnerabilities: CVE-2025-22868, CVE-2025-22870...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-source-controller, newrelic-k8s-metadata-injection, grafana-operator, apko, mountpoint-s3-csi-driver, aws-privateca-issuer, pluto, temporal, tailscale, fluxcd-kustomize-mutating-webhook, local-path-provisioner, karpenter, mariadb-operator, smarter-device-manager...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: istio, flux-source-controller, prometheus-adapter, tempo, ratify, dive, mcp-grafana, kubernetes-csi-node-driver-registrar, kuberay-operator, scorecard, spegel, velero, kserve-modelmesh-serving, cortex, tailscale, sftpgo-plugin-kms, crossplane-provider-aws-dynamodb,...

CLEANSTART-2026-DN29911 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Security vulnerability affects the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CLEANSTART-2025-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM16286 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...