Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name

Summary A missing end anchor $ in the ClassDefinition UID validation regex allows an authenticated user with the objects permission to create a class with a malicious UID containing SQL. When a data object of that class is later loaded, Block.php concatenates the raw classId directly into a SQL...

CLEANSTART-2026-EI00038 Security fixes in knative-net-istio 1.20.4-r0

Package knative-net-istio version 1.20.4-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-JS88744 Security fixes in temporal-server 1.31.1-r4

Package temporal-server version 1.31.1-r4 fixes 8 vulnerabilities: CVE-2026-5724, ghsa-q98v-9f9w-f49q, ghsa-hmhp-gh8m-c8xp, ghsa-p2gr-hm8g-q772, ghsa-xpg8-3hhp-p7w8...

CLEANSTART-2026-WY74972 Security fixes in temporal-server 1.31.1-r3

Package temporal-server version 1.31.1-r3 fixes 8 vulnerabilities: ghsa-q98v-9f9w-f49q, ghsa-hmhp-gh8m-c8xp, ghsa-p2gr-hm8g-q772, ghsa-xpg8-3hhp-p7w8, CVE-2025-14987...

CLEANSTART-2026-YC19931 Security fixes in kube-vip-fips 1.1.2-r1

Package kube-vip-fips version 1.1.2-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-PY70964 Security fixes in sqlpad 7.5.7-r4

Package sqlpad version 7.5.7-r4 fixes 2 vulnerabilities: ghsa-v422-hmwv-36x6, CVE-2026-12590...

CLEANSTART-2026-XO42004 Security fixes in eck-operator 3.4.1-r3

Package eck-operator version 3.4.1-r3 fixes 1 vulnerabilities: CVE-2026-56852...

CLEANSTART-2026-UG31660 Security fixes in langfuse-worker 3.146.0-r1

Package langfuse-worker version 3.146.0-r1 fixes 1 vulnerabilities: ghsa-6475-r3vj-m8vf...

CLEANSTART-2026-SM89830 Security fixes in kumactl 2.14.0-r2

Package kumactl version 2.14.0-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-PF51019 Security fixes in temporal-server 1.31.1-r1

Package temporal-server version 1.31.1-r1 fixes 10 vulnerabilities: ghsa-q98v-9f9w-f49q, ghsa-hmhp-gh8m-c8xp, ghsa-p2gr-hm8g-q772, ghsa-xpg8-3hhp-p7w8, CVE-2025-14987...

CLEANSTART-2026-QH76136 Security fixes in argo-workflows-fips 4.0.6-r1

Package argo-workflows-fips version 4.0.6-r1 fixes 8 vulnerabilities: ghsa-crhj-59gh-8x96, ghsa-389r-gv7p-r3rp, ghsa-m7cr-m3pv-hgrp, ghsa-w5pp-99ch-qj29, CVE-2026-45022...

CLEANSTART-2026-ZL34069 Security fixes in cortex 1.20.1-r2

Package cortex version 1.20.1-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-GA72012 Security fixes in knative-net-istio 1.19.6-r0

Package knative-net-istio version 1.19.6-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-ZS03179 Security fixes in opentelemetry-collector-contrib 0.153.0-r3

Package opentelemetry-collector-contrib version 0.153.0-r3 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-PR41614 Security fixes in k8sgpt-operator 0.2.27-r2

Package k8sgpt-operator version 0.2.27-r2 fixes 1 vulnerabilities: CVE-2026-27145...

CLEANSTART-2026-LM38080 Security fixes in elastic-beats 9.3.9-r0

Package elastic-beats version 9.3.9-r0 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-HQ56526 Security fixes in knative-net-istio 1.21.4-r1

Package knative-net-istio version 1.21.4-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-JR76214 Security fixes in mailpit 1.30.3-r1

Package mailpit version 1.30.3-r1 fixes 1 vulnerabilities: CVE-2026-56852...

CLEANSTART-2026-LY65010 Security fixes in litestream 0.5.14-r2

Package litestream version 0.5.14-r2 fixes 3 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-xmrv-pmrh-hhx2...

CLEANSTART-2026-UN60914 Security fixes in spark-operator 2.5.1-r1

Package spark-operator version 2.5.1-r1 fixes 2 vulnerabilities: CVE-2026-29181, ghsa-mh2q-q3fh-2475...