CLEANSTART-2026-UL53723 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the external-secrets-operator package. go-git is an extensible git implementation library written in pure Go...

CLEANSTART-2026-LO42693 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-RY70674 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-QV38909 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the external-secrets-operator package. go-git is an extensible git implementation library written in pure Go...

CLEANSTART-2026-VP76604 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-ON16663 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-CQ05978 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CLEANSTART-2026-FV50859 Security fix for GHSA-p77j-4mvh-x3m3 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OX52172 Security fix for GHSA-mh2q-q3fh-2475 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QL10579 Security fix for GHSA-hfvc-g4fc-pqhx applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MJ34936 Security fix for GHSA-8wmf-6v46-5gfg applied in: weaviate-fips 1.38.19-r3, weaviate-fips 1.39.10-r1

GHSA-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QF15454 Security fix for GHSA-mpwr-8vm7-h73f applied in: external-secrets-operator-fips 2.7.0-r1

Security vulnerability affects the external-secrets-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RV05686 Security fix for GHSA-cp6g-7hqx-qxhp applied in: external-secrets-operator-fips 2.7.0-r1

Security vulnerability affects the external-secrets-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-108846

Name of the Vulnerable Software and Affected Versions Media Library Assistant versions prior to 3.41 Description Stored Cross-site Scripting XSS occurs due to improper neutralization of input during web page generation. This allows an attacker to inject malicious scripts that are stored on the...

OPENSUSE-SU-2026:12093-1 go1.26-1.26.9-1.1 on GA media

These are all security issues fixed in the go1.26-1.26.9-1.1 package on the GA media of openSUSE Tumbleweed...

Apache Struts 2.5.14 <= 2.5.33 / 6.x < 6.12.0 / 7.x < 7.4.0 Denial of Service (S2-076)

The version of Apache Struts installed on the remote host is 2.5.14 through 2.5.33, or 6.x prior to 6.12.0, or 7.x prior to 7.4.0. It is, therefore, affected by a denial of service vulnerability, as referenced in the S2-076 advisory: - Asymmetric resource consumption amplification vulnerability i...

OPENSUSE-SU-2026:12095-1 python313-Django5-5.2.18-1.1 on GA media

These are all security issues fixed in the python313-Django5-5.2.18-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-95609: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41...

Go Cryptography Library DoS

The vulnerability of the Go Cryptography library is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Go Yaml File Processing Heap Buffer Overflow DoS

The vulnerability of the Go Yaml file processing library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...