GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, mariadb-operator, opentelemetry-operator, step-issuer-fips, aws-privateca-issuer-fips, percona-server-mongodb-operator, cert-manager-csi-driver-fips, cert-manager-google-cas-issuer, aws-privateca-issuer, gitlab-operator, step-issuer,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, conftest, harbor-scanner-trivy, cert-exporter, crossplane-provider-aws-cloudformation, trino, crossplane-provider-aws-sqs, vault-k8s, zarf, crossplane, istio, kubeflow-pipelines, nri-couchbase, newrelic-nri-statsd,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: conftest, crossplane-provider-aws-cloudformation, pvc-autoresizer, postgres-operator, restic, blobfuse2, s5cmd, vault-k8s, kubeflow-pipelines, nri-couchbase, runc, newrelic-nri-statsd, telegraf, custom-pod-autoscaler, cosign, lvm-driver, rancher-telemetry,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: prometheus-operator, conftest, kubernetes-dashboard-web, timescaledb-tune, terraform, ratify, azure-service-operator, docker-credential-gcr, fzf, kubernetes-csi-driver-hostpath, aactl, aws-otel-collector, k3s, kubernetes-dashboard, nri-redis, ip-masq-agent, dex,...

CLEANSTART-2026-TQ91527 Security fixes in rabbitmq-cluster-operator 2.22.2-r1

Package rabbitmq-cluster-operator version 2.22.2-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-RR36029 Security fixes in rabbitmq-cluster-operator 2.22.3-r1

Package rabbitmq-cluster-operator version 2.22.3-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-KV79736 Security fixes in rabbitmq-cluster-operator 2.19.2-r5

Package rabbitmq-cluster-operator version 2.19.2-r5 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-SE63944 Security fixes in percona-xtradb-cluster-operator-fips 1.19.0-r1

Package percona-xtradb-cluster-operator-fips version 1.19.0-r1 fixes 3 vulnerabilities: ghsa-gx3x-vq4p-mhhv, CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-CC85180 Security fixes in rabbitmq-cluster-operator 2.20.0-r1

Package rabbitmq-cluster-operator version 2.20.0-r1 fixes 13 vulnerabilities: CVE-2026-27143, ghsa-pc3f-x583-g7j2, CVE-2026-32281, CVE-2026-32280, CVE-2026-32283...

CLEANSTART-2026-KD85421 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r4

Package percona-xtradb-cluster-operator-fips version 1.18.0-r4 fixes 9 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-UP42699 Security fixes in percona-xtradb-cluster-operator 1.19.0-r0

Package percona-xtradb-cluster-operator version 1.19.0-r0 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

CLEANSTART-2026-KH47666 Security fixes in rabbitmq-cluster-operator 2.20.1-r2

Package rabbitmq-cluster-operator version 2.20.1-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-JH58226 Security fixes in rabbitmq-cluster-operator 2.21.0-r0

Package rabbitmq-cluster-operator version 2.21.0-r0 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-GF75739 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r5

Package percona-xtradb-cluster-operator-fips version 1.18.0-r5 fixes 9 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-42506, CVE-2026-42502...

CLEANSTART-2026-EZ87718 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r1

Package percona-xtradb-cluster-operator-fips version 1.18.0-r1 fixes 8 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119...

CLEANSTART-2026-LO51673 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-pc3f-x583-g7j2 applied in versions: 2.18.0-r0

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DV05833 Security fixes for CVE-2026-42504 applied in versions: 2.21.0-r0

Security vulnerability affects the rabbitmq-cluster-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OH87240 Security fixes for CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-pc3f-x583-g7j2 applied in versions: 2.19.2-r0, 2.19.2-r1, 2.19.2-r2, 2.19.2-r3

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LG16061 Security fixes for CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-pc3f-x583-g7j2 applied in versions: 2.19.2-r0, 2.19.2-r1, 2.19.2-r2, 2.19.2-r3

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

Impact Having the Topic and User operators to watch different namespaces than the one where the Kafka cluster is deployed, is a fully documented feature. When the watchedNamespace field is used within the Topic or User operator as part of the Kafka.spec.entityOperator field, the Cluster Operator...