GO-2025-3955 vulnerabilities

Vulnerabilities for packages: polaris, lazydocker, ipfs-cluster, nri-mysql, argo-events, zot, nodetaint, grafana-rollout-operator, falcoctl, trivy, ip-masq-agent, kuberlr, docker-credential-gcr, tkn, yunikorn-k8shim, headlamp, helm-set-status, eksctl, cloud-provider-gcp-cloud-controller-manager,...

CLEANSTART-2026-QR05590 Security fixes in clickhouse-operator 0.25.5-r0

Package clickhouse-operator version 0.25.5-r0 fixes 2 vulnerabilities: CVE-2025-22868, CVE-2025-22870...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: polaris, flux-image-reflector-controller, clickhouse-operator, malcontent, aws-network-policy-agent, envoy-ratelimit, metacontroller, supercronic, dbmate, nodetaint, mariadb-operator, grafana-rollout-operator, sftpgo-plugin-eventsearch, oras, newrelic-infra-operator,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: lazydocker, datadog-operator, gogatekeeper, opentelemetry-operator, azcopy, kubo, cilium, amazon-cloudwatch-agent, argo-events, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-s3, net-kourier, rancher-agent, cadvisor, pulumi-kubernetes-operator, zot,...

CLEANSTART-2026-DN29911 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Security vulnerability affects the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CLEANSTART-2026-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2025-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM16286 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...