CVE-2026-65835

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE-2026-22872 fix, TenantResource RawItems and Generators in internal/controllers/resources/collect.go, including handleRawItem and handleGeneratorItem, did not apply the...

SUSE CVE-2026-45737

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values embedded in the kubectl.kubernetes.io/last-applied-configuration annotation because HideSecretDatatarget, live, ... does...

SUSE CVE-2026-45760

Externally Controlled Reference to a Resource in Another Sphere, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the...

SUSE CVE-2026-46617

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, Fission runtime pods were created with ServiceAccountName: fission-fetcher, and the fission-fetcher ServiceAccount was granted...

SUSE CVE-2026-46618

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, before the round-1 security sweep, pkg/builder/builder.go passed Environment.spec.builder.command directly into exec.Command...

SUSE CVE-2026-49822

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a low-privilege developer who could create a KubernetesWatchTrigger KWT in their own namespace was able to establish a persistent...

SUSE CVE-2026-50563

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's Container Executor path lets a tenant supply Function.spec.podspec directly; the executor merges it into the...

SUSE CVE-2026-50565

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission builder pods were created with ServiceAccountName: fission-builder and no AutomountServiceAccountToken: false, so the...

SUSE CVE-2026-50566

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a tenant with environments.fission.io create/update RBAC can run privileged / allowPrivilegeEscalation / dangerous-capability...

EUVD-2026-51093

A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...

CLEANSTART-2026-HX66484 Security fixes in kubernetes-csi-livenessprobe-fips 2.18.0-r0

Package kubernetes-csi-livenessprobe-fips version 2.18.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-OP27654 Security fixes in kubernetes-fips 1.35.0-r0

Package kubernetes-fips version 1.35.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-BG21646 Security fixes in kubernetes-dns-node-cache 1.25.0-r5

Package kubernetes-dns-node-cache version 1.25.0-r5 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507...

CLEANSTART-2026-WF12497 Security fixes in consul-k8s-fips 1.9.1-r2

Package consul-k8s-fips version 1.9.1-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QO08875 Security fixes in kubernetes-dns-node-cache-fips 1.26.7-r1

Package kubernetes-dns-node-cache-fips version 1.26.7-r1 fixes 3 vulnerabilities: ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-ZQ36354 Security fixes in kubernetes-dns-node-cache 1.26.7-r1

Package kubernetes-dns-node-cache version 1.26.7-r1 fixes 6 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278...

CLEANSTART-2026-BT76231 Security fixes in kubernetes 1.34.1-r3

Package kubernetes version 1.34.1-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32289, CVE-2026-32282, CVE-2026-27140, CVE-2026-32288...

CLEANSTART-2026-FE95869 Security fixes in consul-k8s-fips 1.5.9-r0

Package consul-k8s-fips version 1.5.9-r0 fixes 4 vulnerabilities: CVE-2025-54410, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199...

CLEANSTART-2026-RQ52450 Security fixes in k8s-sidecar 2.6.0-r0

Package k8s-sidecar version 2.6.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...

CLEANSTART-2026-XX07268 Security fixes in consul-k8s-fips 1.8.1-r0

Package consul-k8s-fips version 1.8.1-r0 fixes 6 vulnerabilities: CVE-2025-22871, CVE-2025-4674, CVE-2025-47907, CVE-2025-47903, CVE-2025-47906...