CLEANSTART-2026-BP51890 Security fixes in istio-fips 1.27.9-r1

Package istio-fips version 1.27.9-r1 fixes 11 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820...

CLEANSTART-2026-JQ21017 Security fixes in istio 1.30.1-r0

Package istio version 1.30.1-r0 fixes 4 vulnerabilities: CVE-2026-42505, CVE-2026-39822, CVE-2026-56852, CVE-2026-46600...

CLEANSTART-2026-CH51137 Security fixes in istio-fips 1.27.8-r1

Package istio-fips version 1.27.8-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-RM35950 Security fixes in istio-fips 1.27.8-r3

Package istio-fips version 1.27.8-r3 fixes 13 vulnerabilities: CVE-2026-27140, CVE-2026-32283, CVE-2026-32280, CVE-2026-32281, ghsa-78h2-9frx-2jm8...

CLEANSTART-2026-LA15614 Security fixes in istio 1.28.4-r1

Package istio version 1.28.4-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-TR35174 Security fixes in istio-fips 1.29.1-r1

Package istio-fips version 1.29.1-r1 fixes 2 vulnerabilities: CVE-2025-15558, ghsa-p436-gjf2-799p...

CLEANSTART-2026-AC52683 Security fixes in istio 1.28.5-r1

Package istio version 1.28.5-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-JZ36078 Security fixes in istio 1.29.1-r0

Package istio version 1.29.1-r0 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-LV58341 Security fixes in istio 1.28.4-r0

Package istio version 1.28.4-r0 fixes 2 vulnerabilities: ghsa-p436-gjf2-799p, CVE-2025-15558...

CLEANSTART-2026-XX23863 Security fixes in istio 1.27.1-r0

Package istio version 1.27.1-r0 fixes 4 vulnerabilities: ghsa-2464-8j7c-4cjm, ghsa-p436-gjf2-799p, CVE-2025-11065, CVE-2025-15558...

CLEANSTART-2026-BA47995 Security fixes in istio-fips 1.26.8-r1

Package istio-fips version 1.26.8-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-MR94464 Security fixes in istio 1.27.9-r1

Package istio version 1.27.9-r1 fixes 4 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-39821, CVE-2026-25680...

CLEANSTART-2026-VT81604 Security fixes in istio-fips 1.28.4-r2

Package istio-fips version 1.28.4-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-BM38174 Security fixes in istio 1.28.5-r2

Package istio version 1.28.5-r2 fixes 2 vulnerabilities: CVE-2025-15558, ghsa-p436-gjf2-799p...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kubernetes, pulumi-kubernetes-operator, external-secrets-operator, cluster-api-provider-vsphere, keda, rancher-agent, cluster-autoscaler, kuma, kwok, calico, rke2-cloud-provider, spqr, tkn, rancher-system-agent, openfga, descheduler, metrics-server, cluster-api,...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, cert-manager-cmctl, step-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, aws-privateca-issuer, percona-server-mongodb-operator, mariadb-operator...

CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

CVE-2026-47237

CVE-2026-47237 affects Kubeflow Community Distribution prior to version 26.03-rc.1. A Kubeflow setup based on official manifests or most packaged distributions is vulnerable to authorization token stealing from any Kubeflow UI/API user (Dashboard, Pipelines API, Notebooks). An attacker with kubef...

CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...

CLEANSTART-2026-VV82680 Security fixes for CVE-2025-11065, CVE-2025-15558, CVE-2026-24051, CVE-2026-25680, CVE-2026-27145, CVE-2026-33186, CVE-2026-34986, CVE-2026-35469, CVE-2026-39821, CVE-2026-39883, CVE-2026-40179, CVE-2026-42504, ghsa-2464-8j7c-4cjm, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-vffh-x6r8-xx99 applied in versions: 1.27.9-r0, 1.27.9-r1, 1.28.7-r0, 1.28.7-r1, 1.28.7-r2

Multiple security vulnerabilities affect the istio package. These issues are resolved in later releases. See references for individual vulnerability details...