CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: tez, neo4j, apache-pulsar-fips, apache-hop, keycloak-fips, apache-hop-fips, knative-kafka-broker-fips, apicurio-registry, apicurio-registry-fips, floci, keycloak, zipkin, tinkerpop, seata, thingsboard, knative-kafka-broker, management-api-for-apache-cassandra-5.0,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: tez, neo4j, apache-pulsar-fips, apache-hop, keycloak-fips, apache-hop-fips, knative-kafka-broker-fips, apicurio-registry, apicurio-registry-fips, floci, keycloak, zipkin, tinkerpop, seata, thingsboard, knative-kafka-broker, management-api-for-apache-cassandra-5.0,...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: tez, neo4j, apache-pulsar-fips, apache-hop, keycloak-fips, apache-hop-fips, knative-kafka-broker-fips, apicurio-registry, apicurio-registry-fips, floci, keycloak, zipkin, tinkerpop, seata, thingsboard, knative-kafka-broker, management-api-for-apache-cassandra-5.0,...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

The vulnerabilities of the components camel-knative-http, camel-cxf-rest, and camel-cxf-transport from the Apache Camel framework allow attackers to execute arbitrary code or gain unauthorized access during write operations.

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

Exploit for Improper Handling of Case Sensitivity in Apache Camel

camel-cxf-rest / camel-cxf / camel-knative-http Header Injecti...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, fleet-server, argo-workflows-fips, vault-fips, nerdctl-fips, opentelemetry-collector-k8s, kube-conformance, timestamp-authority-fips, podman-fips, src, kube-state-metrics, k3s, helmfile, argo-cd, buildkitd-fips, cloud-sql-proxy, calico-fips,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: tigera-operator, percona-server-mongodb-operator, kubernetes-csi-external-attacher, cosign, kapp, secrets-store-csi-driver-provider-gcp, rancher-system-upgrade-controller, secrets-store-csi-driver-provider-azure, continuity, lvm-driver, multus-cni,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: mattermost-fips, commercial-grafana, kyverno-fips, flux, argo-workflows, vault, telegraf, vault-fips, external-secrets-operator, grafana-fips, kube-conformance, keda-fips, kubernetes, k3s, knative-kafka-broker-fips, argo-events, argo-cd, omnictl-multiarch-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium, argo-workflows, argo-workflows-fips, coder-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, kube-state-metrics, k3s, argo-cd, flux-image-automation-controller, calico-fips, gitea-fips, argocd-image-updater,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cilium, argo-workflows, argo-workflows-fips, coder-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, kube-state-metrics, k3s, docker-machine-driver-harvester, argo-cd, flux-image-automation-controller, calico-fips, gitea-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, terragrunt-fips, cilium, argo-workflows, cluster-api-azure-controller-fips, argo-workflows-fips, coder-fips, tflint, external-secrets-operator, kube-conformance, crossplane-provider-azure-servicefabric, gitlab-runner-fips, slsa-verifier,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, terragrunt-fips, cilium, argo-workflows, argo-workflows-fips, coder-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, gitlab-runner-fips, podman-fips, kube-state-metrics, k3s, docker-machine-driver-harvester,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, terragrunt-fips, cilium, argo-workflows, cluster-api-azure-controller-fips, argo-workflows-fips, coder-fips, tflint, external-secrets-operator, kube-conformance, crossplane-provider-azure-servicefabric, gitlab-runner-fips, slsa-verifier,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, terragrunt-fips, cilium, argo-workflows, argo-workflows-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, podman-fips, kube-state-metrics, k3s, grype-db, argo-events, argo-cd, splunk-otel-collector,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: cilium, argo-workflows, cluster-api-azure-controller-fips, coder-fips, vault-fips, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-azure-servicefabric, kube-conformance, helmfile, splunk-otel-collector, nfpm, step, crossplane-provider-azure-storage,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: cilium, argo-workflows, cluster-api-azure-controller-fips, coder-fips, vault-fips, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-azure-servicefabric, kube-conformance, helmfile, splunk-otel-collector, nfpm, step, crossplane-provider-azure-storage,...