CLEANSTART-2026-HQ56526 Security fixes in knative-net-istio 1.21.4-r1

Package knative-net-istio version 1.21.4-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-NM43340 Security fixes in knative-serving 1.22.1-r0

Package knative-serving version 1.22.1-r0 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: floci-az, hono, tez, neo4j, apache-activemq-artemis, floci, apache-pulsar-fips, knative-kafka-broker, apicurio-registry-fips, knative-kafka-broker-fips, pinot-fips, seata, request-9047-keycloak-fips, apache-hop-fips, zipkin, apache-pulsar, keycloak, tinkerpop,...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: floci-az, hono, tez, neo4j, apache-activemq-artemis, floci, apache-pulsar-fips, knative-kafka-broker, apicurio-registry-fips, knative-kafka-broker-fips, pinot-fips, seata, request-9047-keycloak-fips, apache-hop-fips, zipkin, apache-pulsar, keycloak, tinkerpop,...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: floci-az, hono, tez, neo4j, apache-activemq-artemis, floci, apache-pulsar-fips, knative-kafka-broker, apicurio-registry-fips, knative-kafka-broker-fips, pinot-fips, seata, request-9047-keycloak-fips, apache-hop-fips, zipkin, apache-pulsar, keycloak, tinkerpop,...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

The vulnerabilities of the components camel-knative-http, camel-cxf-rest, and camel-cxf-transport from the Apache Camel framework allow attackers to execute arbitrary code or gain unauthorized access during write operations.

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, kubeflow-katib, mattermost-fips, kots, nemo, argo-cd-fips, kubernetes-csi-node-driver-registrar-fips, k3s, kubernetes-fips, tekton-pipelines-fips, loki, buildkitd-fips, gatekeeper, prometheus-elasticsearch-exporter, docker-cli-fips, grafana-fips,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: loki, oras, nri-redis, kine, rancher-webhook, cadvisor, caddy, infinispan-operator, terraform-provider-tls, sonobuoy, http-echo, victoriametrics, redis-operator, rke2-cloud-provider, cloud-sql-proxy, docker-compose, kubescape-operator, argo-events,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: mattermost-fips, argocd-image-updater, commercial-grafana, terragrunt, gitlab-rails-ce, mattermost, keda-fips, traefik, vitess, nemo, external-secrets-operator, argo-cd-fips, backup-restore-operator, k3s, kubernetes-fips, loki, gatekeeper, knative-kafka-broker,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, frankenphp-8.2, mattermost-fips, trivy-operator-fips, kots, nemo, external-secrets-operator, argo-cd-fips, kubernetes-fips, k3s, rancher-agent, tekton-pipelines-fips, loki, gatekeeper, knative-kafka-broker, prometheus-elasticsearch-exporter,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, opentelemetry-collector, frankenphp-8.2, mattermost-fips, trivy-operator-fips, kots, nemo, external-secrets-operator, argo-cd-fips, kubernetes-fips, k3s, rancher-agent, tekton-pipelines-fips, loki, gatekeeper, knative-kafka-broker,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, opentelemetry-collector, terragrunt-fips, frankenphp-8.2, crossplane-provider-azure-solutions, mattermost-fips, trivy-operator-fips, gitlab-runner-fips, kots, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, nemo,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, opentelemetry-collector, terragrunt-fips, frankenphp-8.2, crossplane-provider-azure-solutions, mattermost-fips, trivy-operator-fips, gitlab-runner-fips, kots, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, nemo,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, longhorn-cli-fips, opentelemetry-collector, frankenphp-8.2, mattermost-fips, trivy-operator-fips, gitlab-runner-fips, kots, teleport-operator-fips, nemo, external-secrets-operator, argo-cd-fips, kubernetes-fips, k3s, rancher-agent,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, gitlab-runner-fips, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, external-secrets-operator, kubernetes-fips, crossplane-provider-aws-elbv2-fips, loki, grafana-fips, omnictl-multiarch-fips, pulumi-kubernetes-operator,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, frankenphp-8.2, mattermost-fips, trivy-operator-fips, kots, teleport-operator-fips, nemo, external-secrets-operator, argo-cd-fips, kubernetes-fips, k3s, rancher-agent, splunk-otel-collector-fips, syft, tekton-pipelines-fips, loki, gatekeeper,...