PT-2026-6506

External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function in github.com/external-secrets/external-secrets...

GO-2026-4351 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator

Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: external-dns, thanos-operator, minio, cosign, kubeflow-katib, aactl, tfsec, kubernetes-dns-node-cache, steampipe, spire-server, traefik, flux-image-automation-controller, rancher-helm, opentofu, nerdctl, bom, helm-operator, bento, ferretdb, mattermost, timoni,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: external-dns, thanos-operator, minio, cosign, kubeflow-katib, aactl, tfsec, kubernetes-dns-node-cache, steampipe, spire-server, traefik, flux-image-automation-controller, rancher-helm, opentofu, nerdctl, bom, helm-operator, bento, ferretdb, mattermost, timoni,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: kbld, kserve-modelmesh-serving, rancher-telemetry, thanos-operator, minio, kubernetes-csi-driver-hostpath, tetragon, crossplane-provider-sql, cass-operator, aactl, conjur-cli, pvc-autoresizer, amass, helm-operator, kustomize, mattermost, ingress-nginx-controller,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: rancher-telemetry, thanos-operator, cass-operator, conjur-cli, nri-f5, esbuild, minio-object-browser, crossplane-provider-aws-lambda, nri-nagios, headlamp, langfuse, flux-kustomize-controller, dkron, gostatsd, spegel, aws-flb-kinesis, mods, xcaddy,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: rancher-telemetry, thanos-operator, cass-operator, conjur-cli, nri-f5, esbuild, minio-object-browser, crossplane-provider-aws-lambda, nri-nagios, headlamp, langfuse, flux-kustomize-controller, dkron, gostatsd, spegel, aws-flb-kinesis, mods, xcaddy,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: kbld, kserve-modelmesh-serving, rancher-telemetry, thanos-operator, minio, tetragon, crossplane-provider-sql, cass-operator, aactl, conjur-cli, pvc-autoresizer, ctop, nri-f5, amass, govulncheck, helm-operator, kustomize, mattermost, ingress-nginx-controller, restic,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: rancher-telemetry, thanos-operator, cass-operator, conjur-cli, nri-f5, esbuild, minio-object-browser, crossplane-provider-aws-lambda, nri-nagios, headlamp, langfuse, flux-kustomize-controller, dkron, gostatsd, spegel, aws-flb-kinesis, mods, xcaddy,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: rancher-telemetry, thanos-operator, cass-operator, conjur-cli, nri-f5, esbuild, minio-object-browser, crossplane-provider-aws-lambda, nri-nagios, headlamp, langfuse, flux-kustomize-controller, dkron, gostatsd, spegel, aws-flb-kinesis, mods, xcaddy,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: kbld, kserve-modelmesh-serving, rancher-telemetry, thanos-operator, minio, kubernetes-csi-driver-hostpath, tetragon, crossplane-provider-sql, cass-operator, aactl, conjur-cli, pvc-autoresizer, amass, helm-operator, kustomize, mattermost, ingress-nginx-controller,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: kbld, kserve-modelmesh-serving, rancher-telemetry, thanos-operator, minio, tetragon, crossplane-provider-sql, cass-operator, aactl, conjur-cli, pvc-autoresizer, ctop, nri-f5, amass, govulncheck, helm-operator, kustomize, mattermost, ingress-nginx-controller, restic,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: etcd-fips, helm-operator, osv-scanner, newrelic-fluent-bit-output, cerbos-fips, nrdot-collector-k8s, eck-operator, crossplane-provider-aws-rds-fips, nova-fips, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin, cert-manager-google-cas-issuer,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: etcd-fips, helm-operator, osv-scanner, newrelic-fluent-bit-output, cerbos-fips, nrdot-collector-k8s, eck-operator, crossplane-provider-aws-rds-fips, nova-fips, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin, cert-manager-google-cas-issuer,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: helm-operator, osv-scanner, newrelic-fluent-bit-output, nri-memcached-fips, cerbos-fips, nrdot-collector-k8s, eck-operator, crossplane-provider-aws-rds-fips, nova-fips, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: helm-operator, osv-scanner, newrelic-fluent-bit-output, nri-memcached-fips, cerbos-fips, nrdot-collector-k8s, eck-operator, crossplane-provider-aws-rds-fips, nova-fips, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: helm-operator, osv-scanner, newrelic-fluent-bit-output, nri-memcached-fips, cerbos-fips, nrdot-collector-k8s, eck-operator, crossplane-provider-aws-rds-fips, nova-fips, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: etcd-fips, helm-operator, osv-scanner, newrelic-fluent-bit-output, cerbos-fips, nrdot-collector-k8s, eck-operator, crossplane-provider-aws-rds-fips, nova-fips, cloud-provider-gcp-cloud-controller-manager-fips, cert-manager-google-cas-issuer,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: helm-operator, osv-scanner, newrelic-fluent-bit-output, nri-memcached-fips, cerbos-fips, nrdot-collector-k8s, eck-operator, crossplane-provider-aws-rds-fips, nova-fips, cloud-provider-gcp-cloud-controller-manager-fips, linkerd2-cni-plugin,...

CLEANSTART-2026-DN29911 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Security vulnerability affects the clickhouse-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...