10819 matches found
CLEANSTART-2026-WX78037 Security fixes in kubernetes-dns-node-cache 1.26.8-r6
Package kubernetes-dns-node-cache version 1.26.8-r6 fixes 2 vulnerabilities: CVE-2026-50274, ghsa-74j5-xf3v-crq8...
CLEANSTART-2026-TO97243 Security fixes in yunikorn-k8shim 1.8.0-r1
Package yunikorn-k8shim version 1.8.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...
CLEANSTART-2026-CB76425 Security fixes in consul-k8s 2.0.1-r1
Package consul-k8s version 2.0.1-r1 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-50151, CVE-2026-50162...
CLEANSTART-2026-IJ26025 Security fixes in metrics-server 0.8.1-r3
Package metrics-server version 0.8.1-r3 fixes 13 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-42151, CVE-2026-42154...
CLEANSTART-2026-UN60914 Security fixes in spark-operator 2.5.1-r1
Package spark-operator version 2.5.1-r1 fixes 2 vulnerabilities: CVE-2026-29181, ghsa-mh2q-q3fh-2475...
CLEANSTART-2026-HA77289 Security fixes in keda-fips 2.19.0-r1
Package keda-fips version 2.19.0-r1 fixes 8 vulnerabilities: CVE-2026-42151, CVE-2026-42154, CVE-2026-40179, CVE-2026-44903, ghsa-8rm2-7qqf-34qm...
CLEANSTART-2026-HG20195 Security fixes in ip-masq-agent 2.12.0-r1
Package ip-masq-agent version 2.12.0-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-33814...
CLEANSTART-2026-DD27612 Security fixes in k8ssandra-operator 1.26.0-r0
Package k8ssandra-operator version 1.26.0-r0 fixes 51 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2025-47911...
CLEANSTART-2026-OO22400 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r1
Package rabbitmq-messaging-topology-operator version 1.16.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...
CLEANSTART-2026-LS13491 Security fixes in kubernetes-dns-node-cache-fips 1.26.0-r1
Package kubernetes-dns-node-cache-fips version 1.26.0-r1 fixes 18 vulnerabilities: CVE-2025-47950, CVE-2023-28452, CVE-2024-0874, CVE-2025-58063, ghsa-cvx7-x8pj-x2gw...
Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1
cert-manager Operator for Red Hat OpenShift 1.19.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
Elastic Cloud on Kubernetes 3.5.0 Security Update (ESA-2026-113)
Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure Cleartext Storage of Sensitive Information in an Environment Variable CWE-526 in Elastic Cloud on Kubernetes ECK can lead to information disclosure via Retrieve...
Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1
cert-manager Operator for Red Hat OpenShift 1.19.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
Important: Red Hat Security Advisory: external secrets operator for Red Hat OpenShift 1.1.1
external secrets operator for Red Hat OpenShift 1.1.1 The External Secrets Operator for Red Hat OpenShift builds on top of Kubernetes, which integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager,...
[SECURITY] Fedora 43 Update: cri-o1.34-1.34.11-1.fc43
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...
[SECURITY] Fedora 44 Update: cri-o1.34-1.34.11-1.fc44
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...
PT-2026-71925
Name of the Vulnerable Software and Affected Versions OpenChoreo versions prior to 1.0.3 OpenChoreo versions prior to 1.1.3 OpenChoreo versions prior to 1.2.0-rc.2 Description The internal/cluster-gateway/server.go component exposes the '/api/proxy/', '/api/exec/', and '/api/wirelogs/' endpoints ...
PT-2026-71924
Name of the Vulnerable Software and Affected Versions OpenChoreo versions 1.2.0-rc.1 through 1.2.0 Description An authorization flaw exists in the openchoreo-api where the system uses a caller-supplied project query parameter instead of the comp.Spec.Owner.ProjectName to authorize component:exec...
Traefik 3.7.0 < 3.7.8 Path Traversal Authentication Bypass (CVE-2026-67309)
The version of Traefik installed on the remote macOS host is 3.7.x prior to 3.7.8. It is, therefore, affected by a path traversal vulnerability: - A path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware allows an unauthenticated attacker to craft request...
