ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

CLEANSTART-2026-KX17765 Security fixes in kuberay-operator 1.6.2-r2

Package kuberay-operator version 1.6.2-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-SI62539 Security fixes in kuberay-operator 1.4.2-r2

Package kuberay-operator version 1.4.2-r2 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-IA05146 Security fixes in kuberay-operator 1.5.2-r1

Package kuberay-operator version 1.5.2-r1 fixes 5 vulnerabilities: CVE-2026-33814, CVE-2025-47911, CVE-2025-58190, CVE-2026-56852, CVE-2026-39824...

CLEANSTART-2026-CL96229 Security fixes in kuberay-operator 1.4.2-r1

Package kuberay-operator version 1.4.2-r1 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-EQ48290 Security fixes in kuberay-operator 1.5.2-r3

Package kuberay-operator version 1.5.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CLEANSTART-2026-KF62505 Security fixes in kuberay-operator 1.5.2-r2

Package kuberay-operator version 1.5.2-r2 fixes 7 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-WA25987 Security fixes in kuberay-operator 1.6.2-r1

Package kuberay-operator version 1.6.2-r1 fixes 11 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CLEANSTART-2026-SO78527 Security fixes in kuberay-operator 1.7.0-r1

Package kuberay-operator version 1.7.0-r1 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-II11706 Security fixes in kuberay-operator 1.3.2-r2

Package kuberay-operator version 1.3.2-r2 fixes 8 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-TD33969 Security fixes in kuberay-operator 1.4.2-r3

Package kuberay-operator version 1.4.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-KN37545 Security fixes in kuberay-operator 1.3.2-r3

Package kuberay-operator version 1.3.2-r3 fixes 13 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: grafana-operator, nri-haproxy, aws-node-termination-handler, controller-gen, terraform-provider-sendgrid, victoriametrics-cluster, caddy, grafana-agent-operator, bazelisk, nri-mongodb, multus-cni, gitness, kyverno, kind, paranoia, flux-image-automation-controller,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: grafana-operator, controller-gen, terraform-provider-sendgrid, victoriametrics-cluster, nri-mongodb, crossplane-provider-aws-kms, gitness, crossplane-provider-aws-ec2, kyverno, kind, kubernetes-csi-external-snapshotter, flux-image-automation-controller,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: grafana-operator, controller-gen, terraform-provider-sendgrid, victoriametrics-cluster, nri-mongodb, crossplane-provider-aws-kms, checksec, gitness, crossplane-provider-aws-ec2, kyverno, kind, kubernetes-csi-external-snapshotter, flux-image-automation-controller,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: grafana-operator, controller-gen, terraform-provider-sendgrid, victoriametrics-cluster, nri-mongodb, crossplane-provider-aws-kms, gitness, crossplane-provider-aws-ec2, kyverno, kind, kubernetes-csi-external-snapshotter, flux-image-automation-controller,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: php-fpmexporter, dagdotdev, grafana-operator, kube-vip, kserve-rest-proxy, hivemind, custom-pod-autoscaler-operator, vault-k8s, kube-vip-cloud-provider, git-lfs, checksec, confluent-common-docker, local-path-provisioner, shfmt, docker-credential-ecr-login, gitsign,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: php-fpmexporter, dagdotdev, grafana-operator, kube-vip, kserve-rest-proxy, hivemind, custom-pod-autoscaler-operator, vault-k8s, kube-vip-cloud-provider, git-lfs, checksec, confluent-common-docker, local-path-provisioner, shfmt, docker-credential-ecr-login, gitsign,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kuberay-operator, addon-resizer, cluster-api, php-fpmexporter, stakater-reloader, checksec, blobfuse2, git-lfs, gitsign, karma-fips, modelmesh-runtime-adapter, mongodb-kubernetes-operator, newrelic-fluent-bit-output, etcd-fips, configmap-reload-fips,...