ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

CLEANSTART-2026-SO78527 Security fixes in kuberay-operator 1.7.0-r1

Package kuberay-operator version 1.7.0-r1 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-WA25987 Security fixes in kuberay-operator 1.6.2-r1

Package kuberay-operator version 1.6.2-r1 fixes 11 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CLEANSTART-2026-CL96229 Security fixes in kuberay-operator 1.4.2-r1

Package kuberay-operator version 1.4.2-r1 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-KN37545 Security fixes in kuberay-operator 1.3.2-r3

Package kuberay-operator version 1.3.2-r3 fixes 13 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-IA05146 Security fixes in kuberay-operator 1.5.2-r1

Package kuberay-operator version 1.5.2-r1 fixes 5 vulnerabilities: CVE-2026-33814, CVE-2025-47911, CVE-2025-58190, CVE-2026-56852, CVE-2026-39824...

CLEANSTART-2026-KX17765 Security fixes in kuberay-operator 1.6.2-r2

Package kuberay-operator version 1.6.2-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-SI62539 Security fixes in kuberay-operator 1.4.2-r2

Package kuberay-operator version 1.4.2-r2 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-II11706 Security fixes in kuberay-operator 1.3.2-r2

Package kuberay-operator version 1.3.2-r2 fixes 8 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-KF62505 Security fixes in kuberay-operator 1.5.2-r2

Package kuberay-operator version 1.5.2-r2 fixes 7 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-TD33969 Security fixes in kuberay-operator 1.4.2-r3

Package kuberay-operator version 1.4.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-EQ48290 Security fixes in kuberay-operator 1.5.2-r3

Package kuberay-operator version 1.5.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubebuilder, vendir, trillian, helm, gobuster, trivy-operator, pguser, sftpgo-plugin-eventstore, rancher-telemetry, seaweedfs, grafana-rollout-operator, gostatsd, newrelic-k8s-metadata-injection, terraform-mcp-server, nri-prometheus, harbor-scanner-trivy, ytt,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kubebuilder, trillian, helm, gogatekeeper, pguser, prometheus-alertmanager, trino, nri-cassandra, sftpgo-plugin-eventstore, secrets-store-csi-driver-provider-gcp, rancher-telemetry, rootlesskit, rabbitmq-cluster-operator, sftpgo-plugin-kms, grafana-rollout-operator,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubebuilder, trillian, helm, gogatekeeper, pguser, prometheus-alertmanager, trino, nri-cassandra, sftpgo-plugin-eventstore, secrets-store-csi-driver-provider-gcp, rancher-telemetry, rootlesskit, rabbitmq-cluster-operator, sftpgo-plugin-kms, grafana-rollout-operator,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kubebuilder, trillian, helm, gogatekeeper, pguser, prometheus-alertmanager, trino, sftpgo-plugin-eventstore, secrets-store-csi-driver-provider-gcp, rancher-telemetry, rootlesskit, rabbitmq-cluster-operator, sftpgo-plugin-kms, grafana-rollout-operator, sqlexporter,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, vault-k8s, confluent-common-docker, lvm-driver, octo-sts, hivemind, terraform-provider-time, bank-vaults, cloud-provider-aws, kserve-rest-proxy, kube-vip, nats, local-path-provisioner, vexctl, container-object-storage-interface, dagdotdev,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, vault-k8s, confluent-common-docker, lvm-driver, octo-sts, hivemind, terraform-provider-time, bank-vaults, cloud-provider-aws, kserve-rest-proxy, kube-vip, nats, local-path-provisioner, vexctl, container-object-storage-interface, dagdotdev,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, git-lfs, k8sgpt-operator, azurefile-csi-fips, eks-distro-fips, docker-credential-ecr-login, blob-csi-fips, nvidia-nsight-compute-13.2, terraform-provider-tls-fips, configmap-reload-fips, shfmt, kube-vip-cloud-provider, ctop, nemo,...