CLEANSTART-2026-ZF37263 Security fix for CVE-2024-35195 applied in: k8s-sidecar 1.25.2-r0, py3-requests 2.32.3-r0, py3.14-requests 2.32.3-r0

CVE-2024-35195 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GK32867 Security fix for CVE-2026-1703 applied in: k8s-sidecar 1.25.2-r0, kubernetes-csi-driver-nfs-fips 4.13.0-r0, python3 3.11.14-r0, python3 3.12.12-r0

CVE-2026-1703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RV30467 Security fix for CVE-2026-44431 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r3, airflow-3 3.2.0-r0, apache-superset 5.0.0-r7, az 2.83.0-r1, az 2.84.0-r2, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, jupyterhub-k8s-hub 4.3.2-r3, jupyterhub-k8s-hub 4.3.3-r0, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, py3-jupyterhub 5.4.4-r0, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-44431 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WH98389 Security fix for CVE-2026-44432 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r3, airflow-3 3.2.0-r0, apache-superset 5.0.0-r7, az 2.83.0-r1, az 2.84.0-r2, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, jupyterhub-k8s-hub 4.3.2-r3, jupyterhub-k8s-hub 4.3.3-r0, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, py3-jupyterhub 5.4.4-r0, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-44432 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TQ24260 Security fix for CVE-2024-47081 applied in: k8s-sidecar 1.25.2-r0

Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BZ71423 Security fix for CVE-2025-8869 applied in: k8s-sidecar 1.25.2-r0

Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZI04041 Security fix for CVE-2026-6357 applied in: k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, python3 3.12.13-r0

CVE-2026-6357 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WY69230 Security fix for CVE-2026-45409 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.2.1-r3, apache-superset 5.0.0-r7, apache-superset 6.0.0-r5, az 2.83.0-r1, az 2.84.0-r2, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r2, miniforge3 26.1.0.0-r2, miniforge3 26.1.1.0-r1, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-45409 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WY38697 Security fix for CVE-2026-3219 applied in: k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, python3 3.12.13-r0

CVE-2026-3219 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FT89883 Security fix for CVE-2026-48710 applied in: airflow-3 3.0.6-r5, airflow-3 3.1.8-r2, airflow-3 3.2.0-r0, k8s-sidecar 2.2.3-r1, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0

CVE-2026-48710 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HB96451 Security fix for CVE-2026-8643 applied in: k8s-sidecar 2.4.0-r1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r1, k8s-sidecar 2.7.1-r1, k8s-sidecar 2.7.4-r1, miniforge3 25.11.0.1-r3, miniforge3 26.1.0.0-r3, miniforge3 26.1.1.0-r2, python3 3.12.13-r1

CVE-2026-8643 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ON23616 Security fix for CVE-2026-59886 applied in: airflow-3 3.0.6-r1, airflow-3 3.1.8-r6, airflow-3 3.2.1-r6, airflow-3 3.2.2-r1, airflow-3 3.3.1-r1, apache-superset 5.0.0-r9, apache-superset 6.0.0-r7, apache-superset 6.1.0-r1, k8s-sidecar 2.6.1-r0, kserve-storage-controller 0.19.0-r0, tensorflow-gpu-jupyter 2.20.0-r1

CVE-2026-59886 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SL06718 Security fix for CVE-2026-13346 applied in: k8s-sidecar 2.6.1-r0, k8s-sidecar 2.8.2-r0, miniforge3 26.1.1.3-r1, miniforge3 26.3.2.3-r1, python3 3.11.15-r1

CVE-2026-13346 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RT26999 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels

Multiple security vulnerabilities affect the k8s-sidecar package. pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. See references for individual vulnerability details...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: openstack-kolla-toolbox-2025.2, openstack-nova-2025.2, opal, openstack-glance-2025.1, apache-beam-python-3.11-sdk, datadog-agent-fips, openstack-horizon-2025.1, duplicity, semgrep, synapse, openstack-horizon-2025.2, datadog-agent, lmcache-cuda-12.8,...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: datadog-agent, k8s-sidecar, in-toto, airflow, open-webui, kserve, kubeflow-volumes-web-app, mycli, mlflow, ggshield, superset, dask-kubernetes, kubeflow, py3-cassandra-medusa, semgrep, mitmproxy...

CLEANSTART-2026-MO39403 Security fixes in k8s-sidecar 2.4.0-r1

Package k8s-sidecar version 2.4.0-r1 fixes 2 vulnerabilities: CVE-2026-8643, ghsa-537c-gmf6-5ccf...

CLEANSTART-2026-YP48558 Security fixes in k8s-sidecar 2.3.0-r0

Package k8s-sidecar version 2.3.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...

CLEANSTART-2026-UC45646 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.6.0-r0, 2.6.0-r1

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-50182 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, reflex, emissary, py3-cassandra-medusa, py3-pipenv, airflow, kserve, jupyter-docker-stacks, kubeflow-katib, py3-pip, confluent-docker-utils, mlflow, dask-kubernetes, pypy-3.11, kubeflow-pipelines, superset, dask-gateway, jwt-tool, kubeflow-jupyter-web-ap...