Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for remediation below. Vulnerability...

GHSA-Q4GF-8MX6-V5V3 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

GHSA-XV6W-GXJ8-V943 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-8JGR-5CGV-G667 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-34753 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...

GHSA-3MWP-WVH9-7528 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-13.0...

GHSA-PF3H-QJGV-VCPR vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...

GHSA-VVJJ-XCJG-GR5G vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kibana, langfuse-fips, librechat, langfuse...

GHSA-V528-7HRM-FRQP vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CLEANSTART-2026-ZG03604 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the tempo package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

CLEANSTART-2026-CO68219 Docker CLI for Windows searches for plugin binaries in C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ProgramData\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Docker\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\cli-plugins, a directory that does not exist by default

Multiple security vulnerabilities affect the istio-fips package. Docker CLI for Windows searches for plugin binaries in...

CVE-2026-34972 vulnerabilities

Vulnerabilities for packages: grafana, openfga...

GHSA-H762-RHV3-H25V vulnerabilities

Vulnerabilities for packages: openexr...

GHSA-CJ63-JHHR-WCXV vulnerabilities

Vulnerabilities for packages: wazuh-dashboard...

GHSA-H8R8-WCCR-V5F2 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard...

GHSA-QJ8W-GFJ5-8C6V vulnerabilities

Vulnerabilities for packages: kubeflow-katib, tileserver-gl, sqlpad, argo-workflows...

GHSA-RX22-G9MX-QRHV vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, pact-broker-docker, pact-broker-docker-fips, ruby3.2-rails...

CLEANSTART-2026-TA42758 Security fixes for ghsa-3p8m-j85q-pgmj, ghsa-45p5-v273-3qqr, ghsa-4cx2-fc23-5wg6, ghsa-9342-92gg-6v29, ghsa-fghv-69vj-qj49, ghsa-h5fg-jpgr-rv9c, ghsa-hq9p-pm7w-8p54, ghsa-j288-q9x7-2f5v applied in versions: 26.1.4-r1

Multiple security vulnerabilities affect the keycloak package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TA27786 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 3.19.0-r0, 3.19.5-r0, 4.0.1-r0

Multiple security vulnerabilities affect the helm package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XP27144 Security fixes for ghsa-58pv-8j8x-9vj2, ghsa-jm66-cg57-jjv5, ghsa-mrfv-m5wm-5w6w applied in versions: 2.81.0-r0

Multiple security vulnerabilities affect the az package. These issues are resolved in later releases. See references for individual vulnerability details...