CLEANSTART-2026-WA48911 authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users

Multiple security vulnerabilities affect the percona-server-mongodb-operator package. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. See...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: seaweedfs, grafana, cert-manager-csi-driver, gitlab-runner, flux-source-controller, kyverno-notation-aws, percona-server-mongodb-operator, opentofu, k6, terraform, xeol, external-secrets-operator, dex, yunikorn-k8shim, ratify, rclone, sftpgo-plugin-auth, rancher-agen...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: seaweedfs, grafana, cert-manager-csi-driver, gitlab-runner, flux-source-controller, kyverno-notation-aws, percona-server-mongodb-operator, opentofu, k6, terraform, xeol, external-secrets-operator, dex, yunikorn-k8shim, ratify, rclone, sftpgo-plugin-auth, rancher-agen...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitlab-runner, terraform-fips, k6-fips, openbao-fips, packer-fips, kyverno-notation-aws-fips, zitadel, flux-source-controller, cert-manager-fips, opentofu-fips, cert-manager-cmctl, harbor, agentbeat, kyverno-fips, dex-fips, xeol,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: k9s-fips, gitlab-runner, rancher-fleet-fips, terraform-provider-kubernetes, kcp-fips, infinispan-operator, jitsucom-bulker, juicefs-csi-driver, kube-arangodb-fips, k8s-driver-manager, falcoctl-fips, gpu-operator-fips, envoy-gateway, plugin-barman-cloud-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: step-issuer, mariadb-operator, cert-manager-csi-driver, cert-manager-webhook-pdns, cert-manager-cmctl, aws-privateca-issuer, percona-server-mongodb-operator, cert-manager-istio-csr, opentelemetry-operator...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer-fips, gitlab-operator, cert-manager-istio-csr, percona-xtradb-cluster-operator, opentelemetry-operator, cert-manager-webhook-pdns-fips, opentelemetry-operator-fips, percona-server-mongodb-operator, gitlab-operator-fips,...