CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, apache-hop-fips, pinot, tinkerpop, pinot-fips, apache-activemq-artemis, keycloak-fips, request-9047-keycloak-fips, neo4j, hadoop-fips, management-api-for-apache-cassandra-5.0, floci-az, zipkin, apicurio-registry, hono, floci, apache-pulsar-fip...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, apache-hop-fips, pinot, tinkerpop, pinot-fips, apache-activemq-artemis, keycloak-fips, request-9047-keycloak-fips, neo4j, hadoop-fips, management-api-for-apache-cassandra-5.0, floci-az, zipkin, apicurio-registry, hono, floci, apache-pulsar-fip...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, apache-hop-fips, pinot, tinkerpop, pinot-fips, apache-activemq-artemis, keycloak-fips, request-9047-keycloak-fips, neo4j, hadoop-fips, management-api-for-apache-cassandra-5.0, floci-az, zipkin, apicurio-registry, hono, floci, apache-pulsar-fip...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JV36933 Security fixes for CVE-2026-46600, CVE-2026-56852 applied in versions: 1.22.1-r0

Multiple security vulnerabilities affect the knative-serving package. These issues are resolved in later releases. See references for individual vulnerability details...

The vulnerabilities of the components camel-knative-http, camel-cxf-rest, and camel-cxf-transport from the Apache Camel framework allow attackers to execute arbitrary code or gain unauthorized access during write operations.

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

Exploit for Improper Handling of Case Sensitivity in Apache Camel

camel-cxf-rest / camel-cxf / camel-knative-http Header Injecti...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: rekor, pinact, flux, fleet-server, caddy-fips, k9s-fips, frankenphp-8.4, kubernetes-fips, undock, zarf, zarf-fips, tekton-pipelines-fips, cilium-envoy-fips, backup-restore-operator, docker-cli-buildx-fips, istio, buildkitd-fips, langfuse-fips, libnvidia-container,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, helm-set-status, otel-cli, aws-node-termination-handler, gomplate, crossplane-provider-aws-sqs, docker-compose, gptscript, envoy-ratelimit, kubeflow-pipelines, kubernetes-csi-external-attacher, restic, sqlexporter, harbor-registry,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: argo-workflows, commercial-expanso-edge, gitlab-rails-ce-fips, containerd, flux, gitlab-workhorse-ce, gitlab-rails-ce, traefik, argo-events, kubernetes-fips, terragrunt, external-secrets-operator-fips, grafana, keda-fips, opentofu, vault-fips, commercial-grafana,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-kas, flux, opentelemetry-collector, k9s-fips, frankenphp-8.4, kubernetes-fips, zarf, minio, coder-fips, zarf-fips, tekton-pipelines-fips, trivy-fips, backup-restore-operator, gitea-fips, istio, kubescape, flux-source-controller, kyverno-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argo-workflows, sops-fips, gitlab-kas, flux, ksops, cg, gatus, opentelemetry-collector, argo-events, caddy-fips, k9s-fips, frankenphp-8.4, kubernetes-fips, crossplane-provider-azure-streamanalytics, zarf, minio, coder-fips, zarf-fips, tekton-pipelines-fips, gatus-fip...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-kas, flux, opentelemetry-collector, k9s-fips, frankenphp-8.4, kubernetes-fips, zarf, minio, coder-fips, zarf-fips, tekton-pipelines-fips, trivy-fips, backup-restore-operator, gitea-fips, istio, kubescape, flux-source-controller, kyverno-fips,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-kas, flux, opentelemetry-collector, cg, gatus, argo-events, k9s-fips, frankenphp-8.4, kubernetes-fips, zarf, minio, coder-fips, zarf-fips, tekton-pipelines-fips, gatus-fips, trivy-fips, backup-restore-operator, rootlesskit, longhorn-manager,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: argo-workflows, sops-fips, gitlab-kas, flux, ksops, cg, gatus, opentelemetry-collector, argo-events, caddy-fips, k9s-fips, frankenphp-8.4, kubernetes-fips, crossplane-provider-azure-streamanalytics, zarf, minio, coder-fips, zarf-fips, tekton-pipelines-fips, gatus-fip...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: argo-workflows, ksops, crossplane-provider-aws-osis, crossplane-provider-aws-sns-fips, coder-fips, zarf-fips, crossplane-provider-aws-elbv2, istio, crossplane-provider-aws-backup-fips, kyverno-fips, crossplane-provider-aws-ram-fips, docker-compose, omnictl-multiarch,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-kas, flux, opentelemetry-collector, cg, argo-events, k9s-fips, frankenphp-8.4, kubernetes-fips, zarf, minio, zarf-fips, tekton-pipelines-fips, trivy-fips, backup-restore-operator, gitea-fips, act, istio, kubescape, flux-source-controller,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: argo-workflows, ksops, crossplane-provider-aws-osis, crossplane-provider-aws-sns-fips, coder-fips, zarf-fips, crossplane-provider-aws-elbv2, istio, crossplane-provider-aws-backup-fips, kyverno-fips, crossplane-provider-aws-ram-fips, docker-compose, omnictl-multiarch,...