GO-2025-3955 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, hubble, libnvidia-container, nova, nuclei, kpt, steampipe, helm-push, aws-eks-pod-identity-agent, nri-mysql, guac, docker-cli, yunikorn-k8shim, tkn, controller-gen, terraform-provider-azapi, kuberlr, rancher-system-upgrade-controller,...

CLEANSTART-2026-QR05590 Security fixes in clickhouse-operator 0.25.5-r0

Package clickhouse-operator version 0.25.5-r0 fixes 2 vulnerabilities: CVE-2025-22868, CVE-2025-22870...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: hubble, malcontent, dgraph, secrets-store-csi-driver-provider-aws, goreleaser, nova, karpenter, mariadb-operator, victoriametrics-cluster, envoy-ratelimit, oras, smarter-device-manager, newrelic-k8s-metadata-injection, metacontroller, dkron, sftpgo-plugin-eventsearch...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: hubble, keda, syft, tfsec, seaweedfs, kubernetes, litestream, prometheus-adapter, steampipe, falcosidekick, rancher, rke2-cloud-provider, dkron, newrelic-infrastructure-agent, gitlab-kas, sftpgo-plugin-pubsub, datadog-operator, guac, openbao, tkn, datadog-agent, k9s,...

CLEANSTART-2026-DN29911 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Security vulnerability affects the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CLEANSTART-2026-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2025-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM16286 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...