trivy-enforcer

trivy-enforcer EXPERIMENTAL Operador de Kubernetes para el aseguramiento de imágenes Funciona como Controlador de admisión Evita que se desplieguen imágenes inseguras Controlador personalizado Observa el CRD ImageVulnerability y escanea la imagen en el recurso personalizado automáticamente...

CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-40564

CVE-2026-40564: SSRF a través de FlinkSessionJob.spec.job.jarURI en flink-kubernetes-operator El operador Apache Flink Kubernetes no verifica el campo spec.job.jarURI en los recursos FlinkSessionJob o FlinkDeployment. Cualquier persona que pueda crear uno de esos recursos puede establecer jarURI ...

CVE-2026-19274

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 contains a vulnerability in the Instana Agent Operator where cluster-scoped RBAC objects are keyed solely by the bare Custom Resource name with no namespace disambiguation. An authenticated Kubernetes tenant can exploit this by ...

Important: Red Hat Security Advisory: Submariner v0.24 security fixes and container updates

Submariner v0.24 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, helm-operator, kubescape, crossplane, rke2-cloud-provider, metallb, cluster-api-helm-controller, zot, kyverno-notation-aws, gatekeeper, kube-state-metrics, kubescape-operator, rancher-system-agent, cluster-api-gcp-controller, openbao, yunikorn-k8shim,...

GO-2025-3690 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, seaweedfs-operator-fips...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: chezmoi, gptscript, src-fingerprint, kots, goreleaser, gitea, kaniko, pulumi-language-yaml, flux-image-automation-controller, k8sgpt, pulumi-kubernetes-operator, kubevela, k9s, kubescape, apko, timoni, flux-source-controller, argo-workflows, crossplane, gitsign,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: chezmoi, gptscript, src-fingerprint, kots, goreleaser, gitea, kaniko, pulumi-language-yaml, flux-image-automation-controller, k8sgpt, pulumi-kubernetes-operator, kubevela, k9s, kubescape, apko, timoni, flux-source-controller, argo-workflows, crossplane, gitsign,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: chezmoi, gptscript, src-fingerprint, rancher-fleet, gitlab-runner, kots, nfpm, argo-cd, teleport, gitea, kaniko, pulumi-language-yaml, flux-image-automation-controller, pulumi-kubernetes-operator, kubevela, k9s, kubescape, apko, flux-source-controller, argo-workflows...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, nri-redis, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flanne...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: slsa-verifier, src-fingerprint, crossplane-provider-azure-storage, rabbitmq-messaging-topology-operator, sops, terragrunt, goreleaser, timestamp-authority, crossplane-provider-azure-managedidentity, flux-notification-controller, crossplane-provider-azure-authorizatio...

CLEANSTART-2026-BB29139 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r2

Package rabbitmq-messaging-topology-operator version 1.16.0-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-YR40466 Security fixes in tigera-operator 1.39.3-r1

Package tigera-operator version 1.39.3-r1 fixes 17 vulnerabilities: CVE-2026-53713, CVE-2026-53714, CVE-2026-53715, CVE-2026-53716, CVE-2026-53717...

CLEANSTART-2026-IT62249 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r0

Package rabbitmq-messaging-topology-operator version 1.16.0-r0 fixes 55 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

CLEANSTART-2026-UN60914 Security fixes in spark-operator 2.5.1-r1

Package spark-operator version 2.5.1-r1 fixes 2 vulnerabilities: CVE-2026-29181, ghsa-mh2q-q3fh-2475...

CLEANSTART-2026-OO22400 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r1

Package rabbitmq-messaging-topology-operator version 1.16.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-DD27612 Security fixes in k8ssandra-operator 1.26.0-r0

Package k8ssandra-operator version 1.26.0-r0 fixes 51 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2025-47911...

Important: Red Hat Security Advisory: VolSync v0.15 security fixes and container updates

VolSync v0.15 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...