CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, zipkin, knative-kafka-broker, thingsboard, management-api-for-apache-cassandra-5.0, floci-az, tez, pinot, floci, apache-hop, hono, apicurio-registry-fips, apache-pulsar-fips, apicurio-registry, apache-activemq-artemis, keycloak, keycloak-fips,...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apache-hop-fips, zipkin, knative-kafka-broker, thingsboard, management-api-for-apache-cassandra-5.0, floci-az, tez, pinot, floci, apache-hop, hono, apicurio-registry-fips, apache-pulsar-fips, apicurio-registry, apache-activemq-artemis, keycloak, keycloak-fips,...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, zipkin, knative-kafka-broker, thingsboard, management-api-for-apache-cassandra-5.0, floci-az, tez, pinot, floci, apache-hop, hono, apicurio-registry-fips, apache-pulsar-fips, apicurio-registry, apache-activemq-artemis, keycloak, keycloak-fips,...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

The vulnerabilities of the components camel-knative-http, camel-cxf-rest, and camel-cxf-transport from the Apache Camel framework allow attackers to execute arbitrary code or gain unauthorized access during write operations.

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: buildah, containerd, traefik, prometheus-operator-fips, knative-serving-fips, atlantis-fips, cerbos-fips, cert-manager-fips, azuredisk-csi, gatekeeper, nerdctl, kube-arangodb-fips, docker-fips, k3s, calico-fips, grafana-alloy, ocm-cli-fips, helmfile, src,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: guac, skopeo, pulumi, pinact, restic, kine, cluster-autoscaler, crossplane-provider-aws-sqs, yunikorn-k8shim, controller-gen, clickhouse-operator, redka, xeol, helm, cluster-api-helm-controller, govulncheck, actions-runner-controller,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: argo-events-fips, harbor, containerd, nemo, traefik, omnictl-multiarch-fips, telegraf, knative-kafka-broker, terragrunt, commercial-grafana, backup-restore-operator, flux, argocd-image-updater, argo-cd, harbor-fips, keda-fips, prometheus, gatekeeper, kyverno-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitea, containerd, k9s, traefik, kubescape-server, minio, knative-serving-fips, argocd-image-updater, argo-cd, gatekeeper, kyverno-fips, nerdctl, kube-arangodb-fips, k3s, calico-fips, trivy-fips, minio-fips, argocd-image-updater-fips, cloud-provider-aws,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: gitea, containerd, clickhouse-backup-fips, k9s, traefik, kubescape-server, minio, terragrunt, knative-serving-fips, argocd-image-updater, argo-cd, gatekeeper, kyverno-fips, nerdctl, kube-arangodb-fips, docker-fips, k3s, peerdb-flow, syft-fips, calico-fips, trivy-fips...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, buildah, clickhouse-backup-fips, containerd, falcoctl-fips, cluster-api-azure-controller, k9s, kubescape-server, minio, traefik, terragrunt, knative-serving-fips, atlantis-fips, step-kms-plugin-fips, argocd-image-updater, argo-cd, cosign,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: gitea, step-issuer, buildah, clickhouse-backup-fips, containerd, falcoctl-fips, cluster-api-azure-controller, k9s, kubescape-server, minio, traefik, terragrunt, knative-serving-fips, atlantis-fips, step-kms-plugin-fips, argocd-image-updater, argo-cd, cosign,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitea, containerd, k9s, traefik, kubescape-server, minio, knative-serving-fips, argocd-image-updater, argo-cd, gatekeeper, kyverno-fips, nerdctl, kube-arangodb-fips, k3s, calico-fips, trivy-fips, minio-fips, argocd-image-updater-fips, cloud-provider-aws,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: buildah, containerd, gitlab-cng, crossplane-provider-aws-kafkaconnect-fips, minio, crossplane-provider-aws-elasticsearch-fips, atlantis-fips, crossplane-provider-aws-acm, crossplane-provider-aws-emrserverless, crossplane-provider-aws-bedrockagent, argo-cd,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: buildah, containerd, gitlab-cng, crossplane-provider-aws-kafkaconnect-fips, minio, crossplane-provider-aws-elasticsearch-fips, atlantis-fips, crossplane-provider-aws-acm, crossplane-provider-aws-emrserverless, crossplane-provider-aws-bedrockagent, argo-cd,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: gitea, containerd, k9s, traefik, kubescape-server, minio, terragrunt, knative-serving-fips, argocd-image-updater, argo-cd, gatekeeper, kyverno-fips, nerdctl, kube-arangodb-fips, k3s, syft-fips, calico-fips, trivy-fips, minio-fips, argo-events,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: gitea, containerd, clickhouse-backup-fips, k9s, traefik, kubescape-server, minio, terragrunt, knative-serving-fips, argocd-image-updater, argo-cd, gatekeeper, kyverno-fips, nerdctl, kube-arangodb-fips, docker-fips, k3s, peerdb-flow, syft-fips, calico-fips, trivy-fips...