CLEANSTART-2026-TQ91527 Security fixes in rabbitmq-cluster-operator 2.22.2-r1

Package rabbitmq-cluster-operator version 2.22.2-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-WQ02691 Security fixes in tigera-operator 1.42.3-r1

Package tigera-operator version 1.42.3-r1 fixes 2 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-PU07904 Security fixes in fluent-operator 3.9.0-r2

Package fluent-operator version 3.9.0-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-25680...

CLEANSTART-2026-VJ08145 Security fixes in strimzi-kafka-operator 1.1.0-r2

Package strimzi-kafka-operator version 1.1.0-r2 fixes 25 vulnerabilities: CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-59898...

CLEANSTART-2026-UT88234 Security fixes in thanos-operator 0.3.7-r1

Package thanos-operator version 0.3.7-r1 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-RR36029 Security fixes in rabbitmq-cluster-operator 2.22.3-r1

Package rabbitmq-cluster-operator version 2.22.3-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-RD68609 Security fixes in tigera-operator-fips 1.40.13-r1

Package tigera-operator-fips version 1.40.13-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-ER59632 Security fixes in victoriametrics-operator 0.71.0-r1

Package victoriametrics-operator version 0.71.0-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-HS77703 Security fixes in victoriametrics-operator 0.72.0-r2

Package victoriametrics-operator version 0.72.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-DD27612 Security fixes in k8ssandra-operator 1.26.0-r0

Package k8ssandra-operator version 1.26.0-r0 fixes 51 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2025-47911...

CLEANSTART-2026-OO22400 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r1

Package rabbitmq-messaging-topology-operator version 1.16.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-QW78358 Security fixes in kube-logging-operator 6.4.0-r1

Package kube-logging-operator version 6.4.0-r1 fixes 4 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-33814...

CLEANSTART-2026-DG03733 Security fixes in eck-operator-fips 3.4.1-r2

Package eck-operator-fips version 3.4.1-r2 fixes 1 vulnerabilities: CVE-2026-56852...

CLEANSTART-2026-FV97418 Security fixes in victoriametrics-operator 0.71.0-r2

Package victoriametrics-operator version 0.71.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0

Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-XO42004 Security fixes in eck-operator 3.4.1-r3

Package eck-operator version 3.4.1-r3 fixes 1 vulnerabilities: CVE-2026-56852...

CLEANSTART-2026-LP75251 Security fixes in dynatrace-operator 1.10.0-r1

Package dynatrace-operator version 1.10.0-r1 fixes 1 vulnerabilities: CVE-2026-46600...

EUVD-2026-57821

Budibase before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB datasource integration where user-supplied parameters are enriched with handlebars using noEscaping: true and parsed without operator filtering. Attackers can inject MongoDB operators through query parameters to bypass...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1

cert-manager Operator for Red Hat OpenShift 1.19.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Elastic Cloud on Kubernetes 3.5.0 Security Update (ESA-2026-121)

Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without...