68 matches found
CLEANSTART-2026-TR09708 Security fix for ghsa-8wmf-6v46-5gfg applied in: rabbitmq-cluster-operator 2.21.1-r6
Security vulnerability affects the rabbitmq-cluster-operator package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-105253
Security vulnerability affects the rabbitmq-cluster-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-LX31883 Security fix for ghsa-gx3x-vq4p-mhhv applied in: cert-manager-cmctl 2.3.0-r1, cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.19.0-r1, percona-xtradb-cluster-operator-fips 1.19.0-r1
ghsa-gx3x-vq4p-mhhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OJ21892 Security fix for CVE-2026-25518 applied in: cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, step-issuer 0.9.11-r1
CVE-2026-25518 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CVE-2026-55225 Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.entityOperator watchedNamespace to a target namespace, causing the Cluster...
CVE-2026-55225: Improper Privilege Management
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.entityOperator watchedNamespace to a target namespace, causing the Cluster...
CLEANSTART-2026-CT24188 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-XP64749 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-CW06250 Security fixes in rabbitmq-cluster-operator 2.22.4-r0
Package rabbitmq-cluster-operator version 2.22.4-r0 fixes 8 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: cert-manager-google-cas-issuer, cert-manager-cmctl, percona-server-mongodb-operator-fips, step-issuer-fips, mariadb-operator-fips, percona-xtradb-cluster-operator-fips, cert-manager-istio-csr, cert-manager-webhook-pdns, percona-xtradb-cluster-operator,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: flux, spark-operator, litefs, kube-fluentd-operator, datadog-agent, kapp-controller, kiali, fuse-overlayfs-snapshotter, sftpgo-plugin-eventstore, vcluster, atlantis, golangci-lint, cert-exporter, node-problem-detector, vertical-pod-autoscaler,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: nri-postgresql, lazygit, rabbitmq-default-user-credential-updater, litefs, spark-operator, kapp-controller, nri-mongodb, scorecard, fuse-overlayfs-snapshotter, restic, hydra, k8sgateway, thanos-operator, azure-service-operator, kubernetes-dashboard-metrics-scraper,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: flux, rabbitmq-default-user-credential-updater, spark-operator, kapp-controller, chartmuseum, ko, k8sgateway, thanos-operator, azure-service-operator, kubernetes-dashboard-web, aws-privateca-issuer, kubernetes-csi-external-health-monitor, gobuster, argo-events, fzf,...
CLEANSTART-2026-TQ91527 Security fixes in rabbitmq-cluster-operator 2.22.2-r1
Package rabbitmq-cluster-operator version 2.22.2-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-RR36029 Security fixes in rabbitmq-cluster-operator 2.22.3-r1
Package rabbitmq-cluster-operator version 2.22.3-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-JH58226 Security fixes in rabbitmq-cluster-operator 2.21.0-r0
Package rabbitmq-cluster-operator version 2.21.0-r0 fixes 1 vulnerabilities: CVE-2026-42504...
CLEANSTART-2026-PD63045 Security fixes in percona-xtradb-cluster-operator-fips 1.19.0-r2
Package percona-xtradb-cluster-operator-fips version 1.19.0-r2 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...
CLEANSTART-2026-KD85421 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r4
Package percona-xtradb-cluster-operator-fips version 1.18.0-r4 fixes 9 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...
CLEANSTART-2026-SE63944 Security fixes in percona-xtradb-cluster-operator-fips 1.19.0-r1
Package percona-xtradb-cluster-operator-fips version 1.19.0-r1 fixes 3 vulnerabilities: ghsa-gx3x-vq4p-mhhv, CVE-2025-68121, CVE-2025-61732...