Important: Red Hat Security Advisory: Submariner v0.24 security fixes and container updates

Submariner v0.24 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

trivy-enforcer

trivy-enforcer 실험적 이미지 보증을 위한 Kubernetes Operator 다음과 같이 동작합니다 Admission Controller 안전하지 않은 이미지가 배포되는 것을 방지 Custom Controller ImageVulnerability CRD를 감시하고 커스텀 리소스의 이미지를 자동으로 스캔 설정 root@kitploit: $ kubectl apply -f manifests/opa.yaml $ kubectl apply -f manifests/cert-manager.yaml $ export...

CVE-2026-40564

CVE-2026-40564: flink-kubernetes-operator의 FlinkSessionJob.spec.job.jarURI를 통한 SSRF Apache Flink Kubernetes Operator는 FlinkSessionJob또는 FlinkDeployment 리소스의 spec.job.jarURI 필드를 확인하지 않습니다. 이러한 리소스 중 하나를 생성할 수 있는 사람은 누구나 jarURI를 임의의 URL로 설정할 수 있습니다. 운영자가 리소스를 조정reconcile하면 자신의 파드 내부에서 해당 URL을 가져옵니다...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, kwok, metallb, opentelemetry-operator, cilium, tekton-chains, k3s, hubble, kube-state-metrics, kubescape-operator, openfga, kuma, spqr, kubescape, k8ssandra-client, cluster-api-ipam-provider-in-cluster, fluent-operator, zo...

GO-2025-3690 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator-fips, seaweedfs-operator...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: melange, grype, k9s, apko, pulumi-language-yaml, wolfictl, gptscript, argo-events, grafana-alloy, trivy, kubevela, argocd-image-updater, kaniko, zarf, crossplane, kots, syft, gitea, scorecard, goreleaser, flux, bom, chezmoi, task, flux-image-automation-controller,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: melange, grype, k9s, apko, pulumi-language-yaml, wolfictl, gptscript, argo-events, grafana-alloy, trivy, kubevela, argocd-image-updater, kaniko, zarf, crossplane, kots, syft, gitea, scorecard, goreleaser, flux, bom, chezmoi, task, flux-image-automation-controller,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: melange, gitlab-runner, grype, k9s, apko, kyverno, pulumi-language-yaml, gptscript, wolfictl, argo-events, trivy-operator, witness, xeol, trivy, kubevela, teleport, argocd-image-updater, cerbos, kaniko, trufflehog, zarf, crossplane, kots, syft, gitea, scorecard, flux...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gitlab-runner, aws-signer-notation-plugin, azure-workload-identity-webhook, timescaledb-parallel-copy, vault-benchmark, crossplane-provider-aws-sns, external-dns, fluxcd-kustomize-mutating-webhook, clickhouse-operator, nri-f5, kubernetes-dns-node-cache,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: timestamp-authority, fulcio, crossplane-provider-azure-storage, opentelemetry-collector-contrib, terraform, falcoctl, argo-events, crossplane-provider-family-azure, buildkitd, crossplane-provider-azure-sql, kubevela, rekor, bank-vaults, vexctl, step-ca, k3d, rook,...

CLEANSTART-2026-IT62249 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r0

Package rabbitmq-messaging-topology-operator version 1.16.0-r0 fixes 55 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

CLEANSTART-2026-OO22400 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r1

Package rabbitmq-messaging-topology-operator version 1.16.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-DD27612 Security fixes in k8ssandra-operator 1.26.0-r0

Package k8ssandra-operator version 1.26.0-r0 fixes 51 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2025-47911...

Important: Red Hat Security Advisory: VolSync v0.15 security fixes and container updates

VolSync v0.15 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1

Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...

CLEANSTART-2026-JV61743 Security fixes in pulumi-kubernetes-operator 2.7.0-r0

Package pulumi-kubernetes-operator version 2.7.0-r0 fixes 42 vulnerabilities: CVE-2024-7598, CVE-2025-1767, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136...

CLEANSTART-2026-WC86090 Security fixes in pulumi-kubernetes-operator 0.18.0-r2

Package pulumi-kubernetes-operator version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

EUVD-2026-46808

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen...

EUVD-2026-46812

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...