GO-2026-4985 vulnerabilities

Vulnerabilities for packages: net-kourier, falcosidekick, cilium, ferretdb, kiali, kots, prometheus-alertmanager, envoy-gateway, splunk-otel-collector, weaviate, aactl, harbor-registry, k6, opa-envoy, flyte, grafana-image-renderer, terragrunt, hydra, prometheus, buildkitd, tkn, op-geth,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: gitlab-kas, cilium, telegraf, kots, cilium-cli, minio, k3s, snyk-cli, fscrypt, aactl, kubernetes, podman, kaf, buildah, kine, prometheus, containerd, istio, kubernetes-dashboard, docker-cli-buildx, zot, cert-manager, mattermost, knative-serving, prometheus-operator,...

CLEANSTART-2026-KT57055 Security fixes in knative-serving 1.20.3-r0

Package knative-serving version 1.20.3-r0 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-SA31637 Security fixes in knative-net-istio 1.21.4-r2

Package knative-net-istio version 1.21.4-r2 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-259r-337f-4rfw...

CLEANSTART-2026-BT37614 Security fixes in knative-net-istio 1.21.4-r0

Package knative-net-istio version 1.21.4-r0 fixes 6 vulnerabilities: CVE-2026-24051, CVE-2026-29181, CVE-2026-33186, CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-KT94915 Security fixes in knative-net-istio 1.22.1-r0

Package knative-net-istio version 1.22.1-r0 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178...

CLEANSTART-2026-HQ56526 Security fixes in knative-net-istio 1.21.4-r1

Package knative-net-istio version 1.21.4-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-NM43340 Security fixes in knative-serving 1.22.1-r0

Package knative-serving version 1.22.1-r0 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: floci-az, apicurio-registry, zipkin, knative-kafka-broker, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, seata, request-9047-keycloak-fips, thingsboard, apicurio-registry-fips, pinot, apache-activemq-artemis, neo4j, celeborn, hono, tez,...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: floci-az, apicurio-registry, zipkin, knative-kafka-broker, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, seata, request-9047-keycloak-fips, thingsboard, apicurio-registry-fips, pinot, apache-activemq-artemis, neo4j, celeborn, hono, tez,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: floci-az, apicurio-registry, zipkin, knative-kafka-broker, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, seata, request-9047-keycloak-fips, thingsboard, apicurio-registry-fips, pinot, apache-activemq-artemis, neo4j, celeborn, hono, tez,...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

The vulnerabilities of the components camel-knative-http, camel-cxf-rest, and camel-cxf-transport from the Apache Camel framework allow attackers to execute arbitrary code or gain unauthorized access during write operations.

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: ocm-cli-fips, frankenphp-8.4, docker, fleet-server, nerdctl-fips, buildah, jaeger-fips, buildkitd-fips, elastic-agent, opentelemetry-collector-k8s, kine, grafana-alloy, vault-secrets-operator-fips, kyverno-policy-reporter-plugins-kyverno-fips, cluster-autoscaler-fips...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: net-kourier, crossplane-provider-aws-cloudformation, blob-csi, percona-server-mongodb-operator, victoriametrics-operator, nri-mysql, stern, k8sgpt, stakater-reloader, crossplane-provider-aws-cloudwatchlogs, go-discover, smokescreen, pdfcpu, eksctl, azuredisk-csi,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: k3s, harbor-fips, argo-cd-fips, gitsign, omnictl-multiarch, terragrunt, vault, knative-kafka-broker, upwind-agent, etcd-fips, kubernetes, grafana-fips, kyverno-fips, traefik-fips, nemo, argocd-image-updater, loki, apply-cve-bump, knative-kafka-broker-fips, argo-event...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, opentelemetry-collector, frankenphp-8.4, spire-server, vault, external-dns, kyverno-fips, kine, argocd-image-updater, seaweedfs-rocksdb-fips, flux-source-controller, cilium-cli, etcd, argo-cd, flux-fips, prometheus-elasticsearch-exporter, zot,...