CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: gitness, falcosidekick, rancher-helm, undock, malcontent, boring-registry, crossplane-provider-aws-cloudfront, tekton-chains, ytt, haproxy-ingress, apache-exporter, gatekeeper, k8s-device-plugin, cerbos, local-path-provisioner, manifest-tool, consul-k8s, step-ca,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: chisel-fips, knative-eventing-fips, nerdctl, k9s-fips, spire-server, cilium-cli, harbor-fips, tigera-operator, argo-cd-fips, gatekeeper-fips, prometheus-operator, kubernetes, backup-restore-operator, k9s, keda-fips, gitea-fips, flux-image-automation-controller-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: chisel-fips, knative-eventing-fips, chainctl, nerdctl, k9s-fips, spire-server, act, cilium-cli, wolfictl, harbor-fips, gomplate-fips, prometheus-podman-exporter, tigera-operator, argo-cd-fips, gatekeeper-fips, prometheus-operator, kubernetes, backup-restore-operator,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: chainctl, crossplane-provider-aws-organizations, crossplane-provider-aws-route53, act, cilium-cli, tigera-operator, crossplane-provider-aws-backup, argo-cd-fips, flux-notification-controller, kubernetes, k9s, crossplane-provider-aws-iam,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, chainctl, nerdctl, k9s-fips, spire-server, act, cilium-cli, wolfictl, harbor-fips, gomplate-fips, prometheus-podman-exporter, tigera-operator, argo-cd-fips, gatekeeper-fips, prometheus-operator, kubernetes, backup-restore-operator, k9s,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, chainctl, nerdctl, k9s-fips, spire-server, act, cilium-cli, wolfictl, harbor-fips, gomplate-fips, prometheus-podman-exporter, tigera-operator, argo-cd-fips, gatekeeper-fips, caddy, prometheus-operator, step-issuer-fips, kubernetes,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, nerdctl, spire-server, cilium-cli, harbor-fips, tigera-operator, argo-cd-fips, gatekeeper-fips, prometheus-operator, kubernetes, backup-restore-operator, keda-fips, traefik, frankenphp-8.5, kyverno-fips, harbor, packer-fips, external-dns,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: chisel-fips, knative-eventing-fips, chainctl, nerdctl, k9s-fips, spire-server, act, flux-operator, crossplane, crossplane-provider-azure-resources, cilium-cli, crossplane-provider-azure-powerbidedicated, crossplane-fips, wolfictl, crossplane-provider-azure-search,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: chainctl, crossplane-provider-aws-organizations, crossplane-provider-aws-route53, act, cilium-cli, tigera-operator, crossplane-provider-aws-backup, argo-cd-fips, flux-notification-controller, kubernetes, k9s, crossplane-provider-aws-iam,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: chisel-fips, knative-eventing-fips, chainctl, nerdctl, k9s-fips, spire-server, act, cilium-cli, wolfictl, harbor-fips, gomplate-fips, prometheus-podman-exporter, tigera-operator, argo-cd-fips, gatekeeper-fips, prometheus-operator, kubernetes, backup-restore-operator,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: chisel-fips, knative-eventing-fips, nerdctl, k9s-fips, spire-server, cilium-cli, harbor-fips, tigera-operator, argo-cd-fips, gatekeeper-fips, prometheus-operator, kubernetes, backup-restore-operator, k9s, keda-fips, gitea-fips, flux-image-automation-controller-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: chisel-fips, knative-eventing-fips, chainctl, nerdctl, k9s-fips, spire-server, act, flux-operator, crossplane, crossplane-provider-azure-resources, cilium-cli, crossplane-provider-azure-powerbidedicated, crossplane-fips, wolfictl, crossplane-provider-azure-search,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, nerdctl, spire-server, cilium-cli, harbor-fips, tigera-operator, argo-cd-fips, gatekeeper-fips, prometheus-operator, kubernetes, backup-restore-operator, keda-fips, traefik, frankenphp-8.5, gitlab-rails-ce, kyverno-fips, harbor, external-dns,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: k3s, zot, rancher, k9s, helm, external-dns, skaffold, kaf, gitlab-kas, cilium, cert-manager, aactl, containerd, fscrypt, kyverno, prometheus, telegraf, trivy, kubernetes, nerdctl, osv-scanner, cloud-provider-aws, kubescape, cilium-cli, kots, chisel,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: k3s, scorecard, zot, terragrunt, chezmoi, k9s, external-dns, helm, skaffold, grype, kaf, gitlab-kas, cilium, cert-manager, aactl, containerd, opentofu, fscrypt, kyverno, prometheus, pulumi-language-dotnet, gptscript, telegraf, trivy, kubernetes, nerdctl, argo-events,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: scorecard, k9s, containerd, cert-manager, aactl, pulumi-language-dotnet, trivy, argo-events, melange, flux-source-controller, pulumi, step, podman, apko, buildah, rancher, external-dns, helm, kaf, cilium, opentofu, gptscript, osv-scanner, cloud-provider-aws, kubescap...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, k3s, buildah, zot, rancher, helm, external-dns, kaf, gitlab-kas, cilium, cert-manager, aactl, containerd, fscrypt, kyverno, prometheus, telegraf, kubernetes, nerdctl, cloud-provider-aws, cilium-cli, kots, snyk-cli, minio, opentelemetry-collector,...