GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cerbos, grafana-rollout-operator, nri-rabbitmq, cni-plugins, azure-service-operator, kubernetes-dashboard-api, ko, kapp-controller, rabbitmq-messaging-topology-operator, grafana-alloy, rclone, ini-file, harbor-cli, zot, aws-eks-pod-identity-agent, docker-cli-buildx,...

CLEANSTART-2026-QR05590 Security fixes in clickhouse-operator 0.25.5-r0

Package clickhouse-operator version 0.25.5-r0 fixes 2 vulnerabilities: CVE-2025-22868, CVE-2025-22870...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, github-mcp-server, omnibump, sftpgo-plugin-eventsearch, ingress-nginx-controller, metacontroller, nfs-subdir-external-provisioner, polaris, mariadb-operator, oras, temporal, goreleaser, tailscale, flux-source-controller,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: cerbos, grafana-rollout-operator, kubo, ingress-nginx-controller, kubernetes-csi-external-resizer, task, metrics-server, snyk-cli, kube-arangodb, op-geth, tempo, goreleaser, tailscale, temporal, azure-service-operator, zarf, cortex, argo-workflows, envoy-gateway,...

CLEANSTART-2026-DN29911 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Security vulnerability affects the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CLEANSTART-2026-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2025-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM16286 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...