GO-2026-5005 vulnerabilities

Vulnerabilities for packages: buildah, containerd, flux, spire-server, aactl, knative-serving, kyverno, cilium-cli, snyk-cli, prometheus, loki, zot, external-dns, gitlab-kas, istio, k3s, kaf, minio, cilium, mattermost, fscrypt, kubernetes, cert-manager, external-secrets-operator, podman, rancher,...

CLEANSTART-2026-KT57055 Security fixes in knative-serving 1.20.3-r0

Package knative-serving version 1.20.3-r0 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-NM43340 Security fixes in knative-serving 1.22.1-r0

Package knative-serving version 1.22.1-r0 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: buildah, envoy-ratelimit, nfs-subdir-external-provisioner, tetragon, vault-env, mongodb-kubernetes-operator, kubernetes-csi-livenessprobe, sftpgo-plugin-eventsearch, step-ca, crossplane-provider-family-aws, vault-benchmark, aws-load-balancer-controller, nri-mysql,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: knative-serving, omnictl-multiarch-fips, loki, drone, gitea, cert-manager, kyverno, tekton-pipelines-fips, opentofu-fips, kyverno-fips, coder, seaweedfs-rocksdb, cloud-provider-aws, elastic-agent-fips, gitlab-kas, grafana-fips, harbor, external-secrets-operator,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, syft, consul, datadog-agent-fips, knative-serving, omnictl-multiarch-fips, redpanda-console, crossplane-provider-azure-powerbidedicated, loki, guac, drone, vault-fips, gitea, gh, prometheus-podman-exporter,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: syft, datadog-agent-fips, knative-serving, omnictl-multiarch-fips, redpanda-console, loki, guac, drone, gitea, gh, prometheus-podman-exporter, cert-manager, amazon-ssm-agent-fips, kyverno, tekton-pipelines-fips, apply-cve-bump, packer, peerdb-flow, argo-events-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, syft, consul, datadog-agent-fips, knative-serving, omnictl-multiarch-fips, redpanda-console, crossplane-provider-azure-powerbidedicated, loki, guac, drone, vault-fips, gitea, gh, prometheus-podman-exporter,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-serving, omnictl-multiarch-fips, loki, drone, gitea, cert-manager, kyverno, tekton-pipelines-fips, opentofu-fips, kyverno-fips, coder, seaweedfs-rocksdb, cloud-provider-aws, elastic-agent-fips, gitlab-kas, grafana-fips, harbor, external-secrets-operator,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, syft, consul, gh, prometheus-podman-exporter, crossplane-provider-aws-organizations-fips, crossplane-provider-aws-eks, go-discover-fips, crossplane-provider-aws-vpc-fips, argo-events-fips, crossplane-provider-aws-autoscaling-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, syft, consul, gh, prometheus-podman-exporter, crossplane-provider-aws-organizations-fips, crossplane-provider-aws-eks, go-discover-fips, crossplane-provider-aws-vpc-fips, argo-events-fips, crossplane-provider-aws-autoscaling-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: syft, knative-serving, omnictl-multiarch-fips, redpanda-console, loki, guac, gitea, prometheus-podman-exporter, cert-manager, amazon-ssm-agent-fips, kyverno, tekton-pipelines-fips, apply-cve-bump, packer, argo-events-fips, splunk-otel-collector, opentofu-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: knative-serving, omnictl-multiarch-fips, loki, cert-manager, kyverno, tekton-pipelines-fips, packer, opentofu-fips, kyverno-fips, cloud-provider-aws, elastic-agent-fips, gitlab-kas, grafana-fips, harbor, external-secrets-operator, prometheus-operator,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: knative-serving, omnictl-multiarch-fips, loki, cert-manager, kyverno, tekton-pipelines-fips, opentofu-fips, kyverno-fips, cloud-provider-aws, elastic-agent-fips, gitlab-kas, grafana-fips, harbor, external-secrets-operator, prometheus-operator, kube-state-metrics,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: syft, datadog-agent-fips, knative-serving, omnictl-multiarch-fips, redpanda-console, loki, guac, drone, gitea, gh, prometheus-podman-exporter, cert-manager, amazon-ssm-agent-fips, kyverno, tekton-pipelines-fips, apply-cve-bump, packer, peerdb-flow, argo-events-fips,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: syft, consul, knative-serving, omnictl-multiarch-fips, redpanda-console, loki, guac, vault-fips, gitea, prometheus-podman-exporter, cert-manager, amazon-ssm-agent-fips, kyverno, tekton-pipelines-fips, go-discover-fips, apply-cve-bump, packer, argo-events-fips,...