CVE-2026-55225 Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.entityOperator watchedNamespace to a target namespace, causing the Cluster...

CLEANSTART-2026-CT24188 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CLEANSTART-2026-XP64749 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CLEANSTART-2026-CW06250 Security fixes in rabbitmq-cluster-operator 2.22.4-r0

Package rabbitmq-cluster-operator version 2.22.4-r0 fixes 8 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: mariadb-operator-fips, cert-manager-webhook-pdns, gitlab-operator-fips, opentelemetry-operator, percona-server-mongodb-operator, cert-manager-istio-csr-fips, aws-privateca-issuer, cert-manager-google-cas-issuer, cert-manager-csi-driver, percona-xtradb-cluster-operato...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: opentofu, helm-push, datadog-agent, docker-machine-driver-harvester, grafana-rollout-operator, kaniko, continuity, prometheus-adapter, secrets-store-csi-driver, delve, tigera-operator, net-kourier, crossplane-provider-azure-managedidentity,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: opentofu, grafana-rollout-operator, mc, esbuild, kubernetes-csi-driver-nfs, secrets-store-csi-driver, flux-notification-controller, crossplane-provider-aws-cloudfront, kyverno-policy-reporter-ui, actions-runner-controller, doppler-kubernetes-operator, nri-rabbitmq,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: opentofu, helm-push, ini-file, grafana-rollout-operator, docker-machine-driver-harvester, kubecolor, delve, kubernetes-csi-driver-nfs, glow, kubernetes-dashboard-auth, flux, nri-rabbitmq, nginx-prometheus-exporter, yunikorn-k8shim, aws-otel-collector,...

CLEANSTART-2026-TQ91527 Security fixes in rabbitmq-cluster-operator 2.22.2-r1

Package rabbitmq-cluster-operator version 2.22.2-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-RR36029 Security fixes in rabbitmq-cluster-operator 2.22.3-r1

Package rabbitmq-cluster-operator version 2.22.3-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-SE63944 Security fixes in percona-xtradb-cluster-operator-fips 1.19.0-r1

Package percona-xtradb-cluster-operator-fips version 1.19.0-r1 fixes 3 vulnerabilities: ghsa-gx3x-vq4p-mhhv, CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-KV79736 Security fixes in rabbitmq-cluster-operator 2.19.2-r5

Package rabbitmq-cluster-operator version 2.19.2-r5 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-CC85180 Security fixes in rabbitmq-cluster-operator 2.20.0-r1

Package rabbitmq-cluster-operator version 2.20.0-r1 fixes 13 vulnerabilities: CVE-2026-27143, ghsa-pc3f-x583-g7j2, CVE-2026-32281, CVE-2026-32280, CVE-2026-32283...

CLEANSTART-2026-KD85421 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r4

Package percona-xtradb-cluster-operator-fips version 1.18.0-r4 fixes 9 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-KH47666 Security fixes in rabbitmq-cluster-operator 2.20.1-r2

Package rabbitmq-cluster-operator version 2.20.1-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-JH58226 Security fixes in rabbitmq-cluster-operator 2.21.0-r0

Package rabbitmq-cluster-operator version 2.21.0-r0 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-UP42699 Security fixes in percona-xtradb-cluster-operator 1.19.0-r0

Package percona-xtradb-cluster-operator version 1.19.0-r0 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

CLEANSTART-2026-PD63045 Security fixes in percona-xtradb-cluster-operator-fips 1.19.0-r2

Package percona-xtradb-cluster-operator-fips version 1.19.0-r2 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-EZ87718 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r1

Package percona-xtradb-cluster-operator-fips version 1.18.0-r1 fixes 8 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119...

CLEANSTART-2026-GF75739 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r5

Package percona-xtradb-cluster-operator-fips version 1.18.0-r5 fixes 9 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-42506, CVE-2026-42502...