GO-2026-6610 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips, longhorn-share-manager,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: dapr, runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, aws-s3-controller, azurefile-csi, falco-exporter, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: dapr, runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, bom, aws-s3-controller, azurefile-csi, nri-nginx, falco-exporter, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, bom, aws-s3-controller, azurefile-csi, nri-nginx, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner, dynamic-localpv-provisione...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: dapr, runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, aws-s3-controller, azurefile-csi, falco-exporter, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: dapr, runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, bom, aws-s3-controller, azurefile-csi, nri-nginx, falco-exporter, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: dapr, runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, bom, aws-s3-controller, azurefile-csi, nri-nginx, falco-exporter, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: dapr, runc, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, bom, aws-s3-controller, azurefile-csi, nri-nginx, falco-exporter, amazon-cloudwatch-agent-operator, grafana-image-renderer, kubernetes-csi-external-provisioner,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, gptscript, migrate, thanos-operator, docker-machine-driver-harvester, kubernetes-dashboard, cluster-api-helm-controller, rclone, glow, chart-testing, gcsfuse, lazydocker, swagger, bom, nri-nginx, portieris, containerd, emissary,...

CLEANSTART-2026-QR05590 Security fixes in clickhouse-operator 0.25.5-r0

Package clickhouse-operator version 0.25.5-r0 fixes 2 vulnerabilities: CVE-2025-22868, CVE-2025-22870...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: metacontroller, newrelic-k8s-metadata-injection, stakater-reloader, grafana-rollout-operator, dgraph, victoriametrics, kubewatch, aws-privateca-issuer, gh, grafana-operator, oras, pluto, fluxcd-kustomize-mutating-webhook, aws-load-balancer-controller, tailscale,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: dapr, kwok, migrate, etcd, docker-machine-driver-harvester, addon-resizer, flux-kustomize-controller, knative-serving, secrets-store-csi-driver-provider-gcp, kserve, cluster-api-helm-controller, velero, policy-controller, spicedb, step-ca, terragrunt,...

CLEANSTART-2026-DN29911 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Security vulnerability affects the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CLEANSTART-2026-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2025-ZR62045 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM16286 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...