GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kuberlr, migrate, controller-gen, fulcio, nri-haproxy, kubernetes-dashboard, envconsul, cis-operator, wgcf, docker-machine-driver-harvester, terraform-mcp-server, nova, tekton-chains, dive, ip-masq-agent, aws-otel-collector, kubernetes-csi-driver-nfs, timescaledb-tun...

CLEANSTART-2026-QR05590 Security fixes in clickhouse-operator 0.25.5-r0

Package clickhouse-operator version 0.25.5-r0 fixes 2 vulnerabilities: CVE-2025-22868, CVE-2025-22870...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: clickhouse-operator, flux-source-controller, dataplaneapi, metacontroller, aws-load-balancer-controller, github-mcp-server, flux, newrelic-k8s-metadata-injection, oras, goreleaser, envoy-ratelimit, nfs-subdir-external-provisioner, malcontent, nodetaint, temporal,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: flux-source-controller, knative-eventing, slsa-verifier, vcluster, dataplaneapi, kube-rbac-proxy, flyte, migrate, jaeger-operator, kubernetes-csi-external-resizer, opencost, fulcio, splunk-otel-collector, azure-workload-identity-webhook, syft, cloud-provider-azure,...

CLEANSTART-2026-DN29911 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Security vulnerability affects the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CLEANSTART-2025-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM16286 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...