GHSA-P2J5-5566-VPV9 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, kafka, kafka-fips, strimzi-kafka-operator-fips...

CVE-2026-19203 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, kafka, kafka-fips, strimzi-kafka-operator-fips...

GHSA-P2J5-5566-VPV9 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, kafka...

CVE-2026-19203 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, kafka...

CVE-2026-104252 Vitess vttablet /twopcz reflected XSS

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a text/html response without HTML...

CVE-2026-110202

Roo-Code versions up to and including 3.54.0 are vulnerable to a command approval bypass in the getCommandDecision() function. The root cause is redirect operator stripping , where attackers can auto-approve denied shell commands by prefixing them with a bare >& redirect. By using indirect pro...

CVE-2026-110202 Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping

Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision that allows attackers to auto-approve denied shell commands by prefixing them with a bare & redirect. Attackers using indirect prompt injection can make the allowlist match a redirect target like echo...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2

cert-manager Operator for Red Hat OpenShift 1.18.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2

cert-manager Operator for Red Hat OpenShift 1.18.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2

cert-manager Operator for Red Hat OpenShift 1.18.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.1

cert-manager Operator for Red Hat OpenShift 1.17.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2

cert-manager Operator for Red Hat OpenShift 1.17.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2

cert-manager Operator for Red Hat OpenShift 1.17.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

FluentRender Code Execution

The vulnerability of the FluentRender component of the logging-operator data collector module related to Fluentd involves incorrect elimination of certain elements in the output data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2026-18529

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task...

CVE-2026-18533

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template...

CVE-2026-18537

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template...

CVE-2026-18529

The IBM Maximo Application Suite - Location Service for Esri Component versions 9.2 , 9.1 , and 9.0 are vulnerable to command injection (CWE-78). This is caused by the improper sanitisation of a user-controlled value passed to a shell command within a Kubernetes operator task . An attacker could ...

EUVD-2026-97902

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task...

CVE-2026-18529 IBM Maximo Application Suite - Location Service for Esri Component Code Execution

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task...