ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

CLEANSTART-2026-TD33969 Security fixes in kuberay-operator 1.4.2-r3

Package kuberay-operator version 1.4.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-IA05146 Security fixes in kuberay-operator 1.5.2-r1

Package kuberay-operator version 1.5.2-r1 fixes 5 vulnerabilities: CVE-2026-33814, CVE-2025-47911, CVE-2025-58190, CVE-2026-56852, CVE-2026-39824...

CLEANSTART-2026-KX17765 Security fixes in kuberay-operator 1.6.2-r2

Package kuberay-operator version 1.6.2-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-SI62539 Security fixes in kuberay-operator 1.4.2-r2

Package kuberay-operator version 1.4.2-r2 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-II11706 Security fixes in kuberay-operator 1.3.2-r2

Package kuberay-operator version 1.3.2-r2 fixes 8 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-KF62505 Security fixes in kuberay-operator 1.5.2-r2

Package kuberay-operator version 1.5.2-r2 fixes 7 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-KN37545 Security fixes in kuberay-operator 1.3.2-r3

Package kuberay-operator version 1.3.2-r3 fixes 13 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-CL96229 Security fixes in kuberay-operator 1.4.2-r1

Package kuberay-operator version 1.4.2-r1 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-EQ48290 Security fixes in kuberay-operator 1.5.2-r3

Package kuberay-operator version 1.5.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CLEANSTART-2026-SO78527 Security fixes in kuberay-operator 1.7.0-r1

Package kuberay-operator version 1.7.0-r1 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-WA25987 Security fixes in kuberay-operator 1.6.2-r1

Package kuberay-operator version 1.6.2-r1 fixes 11 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: goreleaser, kubernetes-csi-external-health-monitor, thanos-operator, docker-credential-acr-env, extism, cloud-provider-azure, nerdctl, sbom-convert, net-kourier, victoriametrics-cluster, docker-credential-gcr, gitlab-pages, nats-server, vexctl, ghaudit, cert-exporter...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, thanos-operator, sbom-convert, net-kourier, victoriametrics-cluster, gitlab-pages, azcopy, cert-exporter, q, terraform-provider-pagerduty, tailscale, nri-nginx, buildah, yunikorn-k8shim, percona-server-mongodb-operator,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, thanos-operator, sbom-convert, net-kourier, victoriametrics-cluster, gitlab-pages, azcopy, cert-exporter, q, terraform-provider-pagerduty, tailscale, nri-nginx, buildah, yunikorn-k8shim, percona-server-mongodb-operator,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, thanos-operator, sbom-convert, net-kourier, victoriametrics-cluster, gitlab-pages, azcopy, cert-exporter, q, terraform-provider-pagerduty, tailscale, nri-nginx, buildah, yunikorn-k8shim, percona-server-mongodb-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: rancher-machine, git-lfs, checksec, gostatsd, hivemind, grafana-operator, pvc-autoresizer, shfmt, mongodb-kubernetes-operator, vexctl, vault-k8s, dagdotdev, k8sgpt-operator, bank-vaults, secrets-store-csi-driver-provider-aws, blobfuse2, newrelic-nri-statsd,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: rancher-machine, git-lfs, checksec, gostatsd, hivemind, grafana-operator, pvc-autoresizer, shfmt, mongodb-kubernetes-operator, vexctl, vault-k8s, dagdotdev, k8sgpt-operator, bank-vaults, secrets-store-csi-driver-provider-aws, blobfuse2, newrelic-nri-statsd,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: rancher-machine, karpenter, git-lfs, cloud-provider-aws-fips, nvidia-nsight-compute-12.8, prometheus-node-exporter-fips, vexctl, k8sgpt-operator, bank-vaults, blob-csi-fips, secrets-store-csi-driver-fips, newrelic-nri-statsd, prometheus-bind-exporter,...