GHSA-HPCC-26XQ-25FV vulnerabilities

Vulnerabilities for packages: celeborn, opensearch, camunda, camunda-zeebe, spark, strimzi-kafka-operator, apache-hop-fips, opensearch-fips, apache-hop, spark-fips, strimzi-kafka-operator-fips...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: celeborn, opensearch, camunda, camunda-zeebe, spark, strimzi-kafka-operator, apache-hop-fips, opensearch-fips, apache-hop, spark-fips, strimzi-kafka-operator-fips...

GHSA-HPCC-26XQ-25FV vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, spark, opensearch...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, spark, opensearch...

stackrox v4.10.6-rc.2

Table of Contents StackRox Kubernetes Security Platform Table of Contents Community Deploying StackRox Quick Installation using Helm Manual Installation using Helm Installation using the Operator Installation via Scripts Kubernetes Distributions EKS, AKS, GKE OpenShift Docker Desktop, Colima, or...

BIT-OPENBAO-2025-64761 OpenBao Privileged Operator Identity Group Root Escalation

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user's permissions in the system. Specifically this is an issue when...

PT-2026-65037

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy. Fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18.0, 1.17.7, 1.16.11, and 1.15.16...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, kubeflow-pipelines, spqr, kyverno-notation-aws, kwok, rancher-agent, yunikorn-k8shim, hubble-ui, cluster-api-azure-controller, kube-vip-cloud-provider, tkn, metallb, apisix-ingress-controller, external-secrets-operator,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, cluster-api-azure-controller-fips, cluster-api, keda, ceph-csi-operator, ocm-kubernetes-controller, onepassword-operator, elastic-agent, perses-fips, tkn-fips, cert-manager-istio-csr-fips, kcp, k8s-agents-operator-fips, hubble,...

GHSA-X2F5-4PRF-W687 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, cinc-auditor...

GHSA-48RX-C7PG-Q66R vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor...

CVE-2026-54696 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, cinc-auditor...

CVE-2026-54171 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor...

renovate-operator v5.4.0

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL

Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.4.1. Vulnerability Details CVEID:CVE-2026-39830 DESCRIPTION: A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked...

CVE-2026-54171 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, cinc-auditor, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips...

GHSA-48RX-C7PG-Q66R vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, cinc-auditor, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips...

GHSA-X2F5-4PRF-W687 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.2-fluentd-kubernetes-daemonset, gitlab-rails-ce, kube-logging-operator, cinc-auditor, pghero, gitlab-rails-ce-fips, pact-broker-docker, pghero-fips, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips...

CVE-2026-54696 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.2-fluentd-kubernetes-daemonset, gitlab-rails-ce, kube-logging-operator, cinc-auditor, pghero, gitlab-rails-ce-fips, pact-broker-docker, pghero-fips, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips...

GHSA-MVX4-532P-XFM9 Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation

Title: Scheduled automations continue after pending-user deactivation and stored model ACL revocation Summary Open WebUI documents pending as a zero-access role used for new sign-ups and deactivated users, and normal HTTP routes enforce that with getverifieduser which rejects pending, while...