ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

CLEANSTART-2026-KN37545 Security fixes in kuberay-operator 1.3.2-r3

Package kuberay-operator version 1.3.2-r3 fixes 13 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-TD33969 Security fixes in kuberay-operator 1.4.2-r3

Package kuberay-operator version 1.4.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-IA05146 Security fixes in kuberay-operator 1.5.2-r1

Package kuberay-operator version 1.5.2-r1 fixes 5 vulnerabilities: CVE-2026-33814, CVE-2025-47911, CVE-2025-58190, CVE-2026-56852, CVE-2026-39824...

CLEANSTART-2026-WA25987 Security fixes in kuberay-operator 1.6.2-r1

Package kuberay-operator version 1.6.2-r1 fixes 11 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CLEANSTART-2026-SI62539 Security fixes in kuberay-operator 1.4.2-r2

Package kuberay-operator version 1.4.2-r2 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-KX17765 Security fixes in kuberay-operator 1.6.2-r2

Package kuberay-operator version 1.6.2-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-SO78527 Security fixes in kuberay-operator 1.7.0-r1

Package kuberay-operator version 1.7.0-r1 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-CL96229 Security fixes in kuberay-operator 1.4.2-r1

Package kuberay-operator version 1.4.2-r1 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-EQ48290 Security fixes in kuberay-operator 1.5.2-r3

Package kuberay-operator version 1.5.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CLEANSTART-2026-II11706 Security fixes in kuberay-operator 1.3.2-r2

Package kuberay-operator version 1.3.2-r2 fixes 8 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-KF62505 Security fixes in kuberay-operator 1.5.2-r2

Package kuberay-operator version 1.5.2-r2 fixes 7 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: flannel, trivy-operator, custom-pod-autoscaler-operator, nri-elasticsearch, ipfs-cluster, stakater-reloader, cluster-autoscaler, grafana-rollout-operator, argo-events, grafana, kafkaexporter, doppler-kubernetes-operator, hubble-ui, caddy, mongo-tools,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: metrics-server, nri-elasticsearch, stakater-reloader, nri-cassandra, cluster-autoscaler, grafana-rollout-operator, argo-events, crossplane-provider-aws-memorydb, kafkaexporter, mongo-tools, pulumi-language-dotnet, kubernetes-csi-driver-nfs, nri-mysql, authservice,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: metrics-server, nri-elasticsearch, stakater-reloader, nri-cassandra, cluster-autoscaler, grafana-rollout-operator, argo-events, crossplane-provider-aws-memorydb, kafkaexporter, mongo-tools, pulumi-language-dotnet, kubernetes-csi-driver-nfs, nri-mysql, authservice,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: metrics-server, nri-elasticsearch, stakater-reloader, cluster-autoscaler, grafana-rollout-operator, argo-events, crossplane-provider-aws-memorydb, kafkaexporter, mongo-tools, pulumi-language-dotnet, kubernetes-csi-driver-nfs, nri-mysql, authservice, dkron,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kube-vip-cloud-provider, custom-pod-autoscaler-operator, linkerd2-proxy-init, addon-resizer, blobfuse2, lvm-driver, docker-credential-ecr-login, gitsign, cloud-provider-aws, secrets-store-csi-driver-provider-aws, kserve-rest-proxy,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, kube-vip-cloud-provider, custom-pod-autoscaler-operator, linkerd2-proxy-init, addon-resizer, blobfuse2, lvm-driver, docker-credential-ecr-login, gitsign, cloud-provider-aws, secrets-store-csi-driver-provider-aws, kserve-rest-proxy,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, prometheus-adapter, kube-vip, bank-vaults, prometheus-node-exporter-fips, mongodb-kubernetes-operator, kubernetes-dashboard-fips, knative-eventing, custom-pod-autoscaler-operator, secrets-store-csi-driver-provider-aws, php-fpmexporter,...