ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

CLEANSTART-2026-CL96229 Security fixes in kuberay-operator 1.4.2-r1

Package kuberay-operator version 1.4.2-r1 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-II11706 Security fixes in kuberay-operator 1.3.2-r2

Package kuberay-operator version 1.3.2-r2 fixes 8 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-KF62505 Security fixes in kuberay-operator 1.5.2-r2

Package kuberay-operator version 1.5.2-r2 fixes 7 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-EQ48290 Security fixes in kuberay-operator 1.5.2-r3

Package kuberay-operator version 1.5.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CLEANSTART-2026-WA25987 Security fixes in kuberay-operator 1.6.2-r1

Package kuberay-operator version 1.6.2-r1 fixes 11 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CLEANSTART-2026-IA05146 Security fixes in kuberay-operator 1.5.2-r1

Package kuberay-operator version 1.5.2-r1 fixes 5 vulnerabilities: CVE-2026-33814, CVE-2025-47911, CVE-2025-58190, CVE-2026-56852, CVE-2026-39824...

CLEANSTART-2026-KN37545 Security fixes in kuberay-operator 1.3.2-r3

Package kuberay-operator version 1.3.2-r3 fixes 13 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-TD33969 Security fixes in kuberay-operator 1.4.2-r3

Package kuberay-operator version 1.4.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-SI62539 Security fixes in kuberay-operator 1.4.2-r2

Package kuberay-operator version 1.4.2-r2 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-SO78527 Security fixes in kuberay-operator 1.7.0-r1

Package kuberay-operator version 1.7.0-r1 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-KX17765 Security fixes in kuberay-operator 1.6.2-r2

Package kuberay-operator version 1.6.2-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, timoni, harbor, rancher-webhook, crossplane-provider-family-azure, terraform-provider-time, flux-helm-controller, knative-eventing, kyverno-notation-aws, esbuild, keda, envoy-gateway, opentelemetry-operator, flux-notification-controller, swagger,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, kubernetes-csi-external-snapshotter, gitea, timoni, terraform-provider-time, flux-helm-controller, knative-eventing, keda, flux-notification-controller, swagger, timestamp-authority, aws-s3-controller, apache-exporter, pvc-autoresizer, skopeo,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, kubernetes-csi-external-snapshotter, gitea, timoni, terraform-provider-time, flux-helm-controller, knative-eventing, keda, flux-notification-controller, swagger, timestamp-authority, aws-s3-controller, apache-exporter, pvc-autoresizer, skopeo,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, kubernetes-csi-external-snapshotter, gitea, timoni, terraform-provider-time, flux-helm-controller, knative-eventing, keda, checksec, flux-notification-controller, swagger, timestamp-authority, aws-s3-controller, apache-exporter, pvc-autoresizer,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nats, sftpgo-plugin-pubsub, newrelic-nri-statsd, hivemind, git-lfs, kubeflow-katib, php-fpmexporter, gostatsd, vault-benchmark, terraform-provider-time, addon-resizer, dagdotdev, rancher-machine, kube-vip-cloud-provider, secrets-store-csi-driver-provider-aws,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: nats, sftpgo-plugin-pubsub, newrelic-nri-statsd, hivemind, git-lfs, kubeflow-katib, php-fpmexporter, gostatsd, vault-benchmark, terraform-provider-time, addon-resizer, dagdotdev, rancher-machine, kube-vip-cloud-provider, secrets-store-csi-driver-provider-aws,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: grafana-operator, kserve-rest-proxy, confluent-common-docker, karpenter-fips, karma-fips, vault-k8s, sftpgo-plugin-geoipfilter, gostatsd, terraform-provider-tls-fips, prometheus-adapter, blob-csi-fips, nvidia-nsight-compute-12.8, local-path-provisioner,...