39 matches found
CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0
Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...
CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...
CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...
CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0
Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: nfpm, kyverno-policy-reporter-ui, local-path-provisioner, istio, gatekeeper, dapr, harbor-registry, gatus, tempo, ferretdb, k8s-device-plugin, crossplane-provider-sql, snyk-cli, gcsfuse, nri-f5, nuclei, kyverno, slsa-verifier, crossplane-provider-aws-route53, croc,...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: skaffold, tekton-pipelines, etcd-fips, prometheus-mongodb-exporter, k9s, upwind-agent, containerd, flux-fips, zitadel, knative-kafka-broker, chisel-fips, prometheus-operator, kubevela-fips, omnictl-multiarch, trivy-fips, snyk-cli, opentofu, zot,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: guac, crossplane-provider-azure-web, skaffold, terragrunt, tekton-pipelines, melange, etcd-fips, prometheus-mongodb-exporter, slsa-verifier, tekton-chains-fips, k9s, falcoctl, upwind-agent, containerd, kargo, flux-fips, zitadel, crossplane-fips, knative-kafka-broker,...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: guac, crossplane-provider-azure-web, skaffold, terragrunt, tekton-pipelines, melange, etcd-fips, prometheus-mongodb-exporter, slsa-verifier, tekton-chains-fips, k9s, falcoctl, upwind-agent, containerd, kargo, flux-fips, zitadel, crossplane-fips, knative-kafka-broker,...
GHSA-VGWF-H737-FF37 vulnerabilities
Vulnerabilities for packages: guac, skaffold, terragrunt, tekton-pipelines, melange, etcd-fips, prometheus-mongodb-exporter, k9s, upwind-agent, containerd, flux-fips, zitadel, knative-kafka-broker, chisel-fips, prometheus-operator, chainloop-cli-fips, kubevela-fips, chainctl, omnictl-multiarch,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: skaffold, tekton-pipelines, etcd-fips, prometheus-mongodb-exporter, k9s, upwind-agent, containerd, flux-fips, zitadel, knative-kafka-broker, chisel-fips, prometheus-operator, kubevela-fips, omnictl-multiarch, trivy-fips, snyk-cli, opentofu, zot,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-acm, kubernetes-secret-generator, melange, tekton-pipelines, crossplane-provider-aws-kinesis-fips, etcd-fips, crossplane-provider-aws-lightsail, flux-fips, crossplane-provider-aws-organizations, crossplane-fips, chainloop-cli-fips,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-acm, kubernetes-secret-generator, melange, tekton-pipelines, crossplane-provider-aws-kinesis-fips, etcd-fips, crossplane-provider-aws-lightsail, flux-fips, crossplane-provider-aws-organizations, crossplane-fips, chainloop-cli-fips,...
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: guac, skaffold, terragrunt, tekton-pipelines, melange, etcd-fips, prometheus-mongodb-exporter, k9s, upwind-agent, containerd, flux-fips, zitadel, knative-kafka-broker, prometheus-operator, chainloop-cli-fips, kubevela-fips, chainctl, omnictl-multiarch, trivy-fips,...
GHSA-9M57-25V3-79X9 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, etcd-fips, prometheus-mongodb-exporter, upwind-agent, containerd, zitadel, knative-kafka-broker, prometheus-operator, omnictl-multiarch, snyk-cli, opentofu, zot, frankenphp-8.2, backup-restore-operator, podman, packer-fips, vitess, spire-server,...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: guac, skaffold, terragrunt, tekton-pipelines, melange, etcd-fips, prometheus-mongodb-exporter, k9s, upwind-agent, containerd, flux-fips, zitadel, knative-kafka-broker, prometheus-operator, chainloop-cli-fips, kubevela-fips, chainctl, omnictl-multiarch, trivy-fips,...
GHSA-JPPX-RXG9-JMRX vulnerabilities
Vulnerabilities for packages: tekton-pipelines, etcd-fips, prometheus-mongodb-exporter, upwind-agent, containerd, zitadel, knative-kafka-broker, prometheus-operator, omnictl-multiarch, snyk-cli, opentofu, zot, frankenphp-8.2, backup-restore-operator, podman, vitess, spire-server, argo-workflows,...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: guac, skaffold, terragrunt, tekton-pipelines, melange, etcd-fips, prometheus-mongodb-exporter, k9s, upwind-agent, containerd, flux-fips, zitadel, knative-kafka-broker, chisel-fips, prometheus-operator, chainloop-cli-fips, kubevela-fips, chainctl, omnictl-multiarch,...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: kubernetes, k3s, kaf, helm, loki, kubescape, zarf, rancher, skaffold, mattermost, kine, chisel, external-dns, telegraf, argocd-image-updater, spire-server, opentelemetry-collector, cilium, cilium-cli, istio, trivy, cloud-provider-aws, cert-manager,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: kubernetes, k3s, kaf, helm, loki, kubescape, zarf, rancher, skaffold, mattermost, kine, chisel, external-dns, telegraf, argocd-image-updater, spire-server, opentelemetry-collector, cilium, cilium-cli, istio, trivy, cloud-provider-aws, cert-manager,...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: nfpm, dagger, k3s, loki, openbao, docker-cli-buildx, skaffold, external-dns, terragrunt, istio, pulumi, opentofu, knative-serving, snyk-cli, nerdctl, aactl, chezmoi, nuclei, gptscript, kyverno, gitea, podman, pulumi-language-dotnet, kaf, helm, act, rancher, mattermos...