CVE-2026-59939 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CLEANSTART-2026-TY53053 Security fixes in tekton-pipelines-fips 1.5.0-r1

Package tekton-pipelines-fips version 1.5.0-r1 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-BG38240 Security fixes in tekton-pipelines-fips 1.10.2-r1

Package tekton-pipelines-fips version 1.10.2-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836, CVE-2026-42499...

CLEANSTART-2026-FI63843 Security fixes in tekton-pipelines-fips 1.7.0-r0

Package tekton-pipelines-fips version 1.7.0-r0 fixes 14 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-p436-gjf2-799p, ghsa-78h2-9frx-2jm8, CVE-2025-15558, CVE-2026-34986...

CLEANSTART-2026-LH49283 Security fixes in tekton-pipelines-fips 1.10.2-r0

Package tekton-pipelines-fips version 1.10.2-r0 fixes 3 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, CVE-2025-15558...

CLEANSTART-2026-LL46016 Security fixes in tekton-pipelines-fips 1.11.0-r0

Package tekton-pipelines-fips version 1.11.0-r0 fixes 3 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, CVE-2025-15558...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: telegraf, rke2-cloud-provider, cluster-autoscaler, helm-operator, rancher-webhook, datadog-operator, istio, kube-state-metrics, azure-service-operator, cloud-provider-gcp-cloud-controller-manager, cluster-api-provider-vsphere, grafana, prometheus-blackbox-exporter,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: agentbeat, cert-manager, kwok, azure-service-operator-fips, cert-manager-webhook-pdns-fips, datadog-operator-fips, tkn-fips, argocd-image-updater-fips, gitlab-operator, gatekeeper-fips, cert-manager-istio-csr, kueue-fips, vcluster-fips, rancher-support-bundle-kit,...

OESA-2026-3116 pipewire security update

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return.CVE-2026-14324...

GHSA-HRXH-6V49-42GF vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-bedrockagent-fips, crossplane-provider-aws-ce, crossplane-provider-aws-licensemanager, buildkitd, opa-fips, grype, crossplane-provider-aws-iam, volume-modifier-for-k8s-fips, dbmate, cert-manager-csi-driver, crossplane-provider-terraform,...

CVE-2026-13060

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

UBUNTU-CVE-2026-13060

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

CVE-2026-13060

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

CVE-2026-13060 $graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

CVE-2026-13060

Technical details are not publicly available in the provided documents. The supplied materials do not specify affected products/components, root cause, or remediation. Monitor for updates.

EUVD-2026-47774

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

EUVD-2026-47783

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...

PT-2026-63464

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

EUVD-2026-46389

Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices'...