GO-2026-6225 vulnerabilities

Vulnerabilities for packages: knative-serving-fips, crossplane, knative-serving, crossplane-fips, tekton-pipelines, kubeflow-katib, tekton-pipelines-fips...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: prometheus-operator, buildah, snyk-cli, falco-no-driver, istio, kots, opentelemetry-collector, zot, external-secrets-operator, cilium, kine, mattermost, minio, fscrypt, nerdctl, containerd, cert-manager, k3s, external-dns, spire-server, gitlab-kas,...

CLEANSTART-2026-KT57055 Security fixes in knative-serving 1.20.3-r0

Package knative-serving version 1.20.3-r0 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-NM43340 Security fixes in knative-serving 1.22.1-r0

Package knative-serving version 1.22.1-r0 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: stakater-reloader, guac, rancher-system-upgrade-controller, smokescreen, terraform-provider-acme, crossplane-provider-azure-managedidentity, docker-machine-driver-harvester, dgraph, kbld, rancher-fleet, crossplane-provider-keycloak, envconsul, cluster-api, eksctl,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux-source-controller, minio, zitadel, etcd-fips, reports-server, prometheus-operator, skaffold-fips, opentofu-fips, tigera-operator, gitea, gitea-fips, k3s, chisel, knative-serving-fips, cilium, helm, knative-kafka-broker-fips, cloudbeat-fips, containerd,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: flux-source-controller, minio, zitadel, packer, wolfictl, gitlab-runner-fips, etcd-fips, reports-server, gomplate, prometheus-operator, juicefs, skaffold-fips, opentofu-fips, tigera-operator, gitea, gitea-fips, k3s, grype-fips, chainctl-fips, chisel,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-source-controller, buildkitd-fips, crossplane-provider-azure-storagecache, minio, zitadel, step-kms-plugin-fips, crossplane-provider-azure-network, neuvector-sigstore-interface, packer, wolfictl, crossplane-provider-azure-netapp, gitlab-runner-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux-source-controller, minio, zitadel, etcd-fips, reports-server, prometheus-operator, skaffold-fips, opentofu-fips, tigera-operator, gitea, gitea-fips, k3s, chisel, knative-serving-fips, cilium, helm, knative-kafka-broker-fips, cloudbeat-fips, containerd,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: flux-source-controller, buildkitd-fips, crossplane-provider-azure-storagecache, minio, zitadel, step-kms-plugin-fips, crossplane-provider-azure-network, neuvector-sigstore-interface, packer, wolfictl, crossplane-provider-azure-netapp, gitlab-runner-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: flux-source-controller, crossplane-provider-azure-network, crossplane-provider-azure-netapp, crossplane-provider-azure-servicebus, tekton-chains, reports-server, juicefs, crossplane-provider-aws-guardduty, kyverno-notation-aws-fips, opentofu-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: flux-source-controller, crossplane-provider-azure-network, crossplane-provider-azure-netapp, crossplane-provider-azure-servicebus, tekton-chains, reports-server, juicefs, crossplane-provider-aws-guardduty, kyverno-notation-aws-fips, opentofu-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: flux-source-controller, minio, zitadel, packer, wolfictl, etcd-fips, reports-server, gomplate, prometheus-operator, skaffold-fips, opentofu-fips, tigera-operator, gitea, gitea-fips, k3s, grype-fips, chainctl-fips, podman, knative-serving-fips, chainctl, cilium, pulum...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: flux-source-controller, minio, zitadel, step-kms-plugin-fips, packer, wolfictl, step-ca-fips, etcd-fips, reports-server, gomplate, prometheus-operator, juicefs, skaffold-fips, opentofu-fips, tigera-operator, gitea, gitea-fips, k3s, grype-fips, chainctl-fips, podman,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: minio, zitadel, packer, etcd-fips, reports-server, prometheus-operator, opentofu-fips, tigera-operator, k3s, podman, knative-serving-fips, cilium, helm, knative-kafka-broker-fips, gitlab-rails-ce-fips, containerd, docker-cli-buildx, frankenphp-8.3, kyverno,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: minio, zitadel, etcd-fips, reports-server, prometheus-operator, opentofu-fips, tigera-operator, k3s, podman, knative-serving-fips, cilium, helm, knative-kafka-broker-fips, gitlab-rails-ce-fips, containerd, docker-cli-buildx, frankenphp-8.3, kyverno,...