GO-2024-2978 vulnerabilities

Vulnerabilities for packages: tflint, osv-scanner, cloudnative-pg, k8sgpt-operator, kargo, dbmate, kubernetes-csi-external-provisioner, terraform-provider-google, ksops, restic, kubernetes-csi-driver-hostpath, guac, sops, terraform-docs, opa, grpc-health-probe, dex, kaniko, melange, k3d, ferretdb...

GO-2025-4188 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, kubeflow, kube-fluentd-operator, gostatsd, newrelic-nri-statsd, smokescreen, go-discover, docker-credential-gcr, aws-flb-firehose, hello-world-golang, aws-flb-kinesis, php-fpmexporter, sonobuoy, terraform-provider-google, kpt, src-fingerprint,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: buildah, kubeflow, step-issuer, temporal-ui-server, timoni, runc, podinfo, gatus, k9s, kubernetes-csi-external-provisioner, nri-haproxy, src, jaeger-operator, victoriametrics-cluster, vault-k8s, crossplane-provider-aws-ec2, kube-vip, speedtest-go, nri-apache, act,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, helm-set-status, kubernetes-csi-driver-nfs, temporal-ui-server, timoni, runc, podinfo, maru, azure-service-operator, gatus, sbomqs, kubernetes-csi-external-provisioner, git-sync, nri-haproxy, src, vault-k8s, juicefs, influx,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, helm-set-status, azure-service-operator, src, kubernetes-dashboard-auth, nri-haproxy, k3d, nri-apache, delve, prometheus-operator, harbor-cli, wgcf, cluster-api-provider-vsphere, dive, render-template, terraform-mcp-server, conftest, kind,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, cluster-api-aws-controller, crossplane-provider-aws, k3d, vcluster, conftest, temporal-server, weaviate, secrets-store-csi-driver, gitsign, dynamic-localpv-provisioner, tailscale, rclone, gomplate, argo-workflows, multus-cni,...

CLEANSTART-2026-TD71000 Security fixes in kube-logging-operator 6.5.2-r1

Package kube-logging-operator version 6.5.2-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...

CLEANSTART-2026-TQ54429 Security fixes in kube-logging-operator 6.7.0-r2

Package kube-logging-operator version 6.7.0-r2 fixes 9 vulnerabilities: CVE-2026-56852, CVE-2026-46600, CVE-2026-44024, CVE-2026-44025, CVE-2026-44160...

CLEANSTART-2026-KD98941 Security fixes in kube-logging-operator 6.6.0-r1

Package kube-logging-operator version 6.6.0-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...

CLEANSTART-2026-WS96350 Security fixes in kube-vip-fips 1.0.4-r1

Package kube-vip-fips version 1.0.4-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-LO17389 Security fixes in kube-vip-fips 1.2.1-r1

Package kube-vip-fips version 1.2.1-r1 fixes 1 vulnerabilities: CVE-2026-42505...

CLEANSTART-2026-DI87691 Security fixes in kube-rbac-proxy-fips 0.22.0-r1

Package kube-rbac-proxy-fips version 0.22.0-r1 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-QW78358 Security fixes in kube-logging-operator 6.4.0-r1

Package kube-logging-operator version 6.4.0-r1 fixes 4 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-33814...

CLEANSTART-2026-YC19931 Security fixes in kube-vip-fips 1.1.2-r1

Package kube-vip-fips version 1.1.2-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27

CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27. A patched version of the package is available...

strimzi-cluster-operator: Cross-namespace privilege escalation via Kafka.spec.entityOperator.watchedNamespace in Strimzi

When the Strimzi cluster operator is deployed with watchAnyNamespace=true or a multi-namespace list, any namespace editor can set Kafka.spec.entityOperator.userOperator.watchedNamespace or topicOperator.watchedNamespace to an arbitrary namespace. The cluster operator then creates a Role granting...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.42 security update

Red Hat build of MicroShift release 4.19.42 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHCOS 4 : Red Hat build of MicroShift 4.19.42 (RHSA-2026:51422)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51422 advisory. - Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code CVE-2026-35469 Note that Nessus...

CVE-2026-15581 Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide

A flaw was found in the TrustyAI Service TAS deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. An attacker can exploit this to read, tamper with, or delete monitoring data and configurations, and inject arbitrary...