CLEANSTART-2026-LS74618 Security fixes in tekton-pipelines 1.11.0-r1

Package tekton-pipelines version 1.11.0-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-FI63843 Security fixes in tekton-pipelines-fips 1.7.0-r0

Package tekton-pipelines-fips version 1.7.0-r0 fixes 14 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-p436-gjf2-799p, ghsa-78h2-9frx-2jm8, CVE-2025-15558, CVE-2026-34986...

CLEANSTART-2026-RM82878 Security fixes in tekton-pipelines 1.7.0-r1

Package tekton-pipelines version 1.7.0-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-LL46016 Security fixes in tekton-pipelines-fips 1.11.0-r0

Package tekton-pipelines-fips version 1.11.0-r0 fixes 3 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, CVE-2025-15558...

CLEANSTART-2026-BG38240 Security fixes in tekton-pipelines-fips 1.10.2-r1

Package tekton-pipelines-fips version 1.10.2-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836, CVE-2026-42499...

Linux Distros Unpatched Vulnerability : CVE-2026-13060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: grafana, kwok, keda, cloud-provider-aws, kube-vip-cloud-provider, metrics-server, rancher, spqr, cert-manager, openfga, apisix-ingress-controller, datadog-operator, telegraf, spicedb, cass-operator, rke2-cloud-provider, openbao, rancher-agent,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, kgateway-fips, ocm-cli, external-secrets-operator-fips, tekton-pipelines-fips, flux-kustomize-controller, seaweedfs-operator-fips, plugin-barman-cloud-fips, commercial-grafana, eks-distro-fips, eck-operator-fips, ansible-operator-fips,...

OESA-2026-3116 pipewire security update

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return.CVE-2026-14324...

GHSA-HRXH-6V49-42GF vulnerabilities

Vulnerabilities for packages: kine, crossplane-provider-gcp-beta-networksecurity, otel-cli, crossplane-provider-kubernetes-fips, longhorn-share-manager, crossplane-provider-aws-kafka-fips, crossplane-provider-aws-s3control, docker-compose, terraform-provider-random-fips,...

CVE-2026-13060

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

UBUNTU-CVE-2026-13060

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

CVE-2026-13060

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

CVE-2026-13060 $graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

CVE-2026-13060

Technical details are not publicly available in the provided documents. The supplied materials do not specify affected products/components, root cause, or remediation. Monitor for updates.

CVE-2026-13060 $graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

EUVD-2026-47774

An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...

EUVD-2026-47783

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...

PT-2026-63464

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user with limited read privileges can access documents from collections they are not authorized to read. This occurs because of an inconsistency...

EUVD-2026-46389

Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices'...