CLEANSTART-2026-VJ20703 Security fixes in postgres-operator 1.15.1-r1

Package postgres-operator version 1.15.1-r1 fixes 24 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-XX81961 Security fixes in postgres-operator 1.12.2-r2

Package postgres-operator version 1.12.2-r2 fixes 48 vulnerabilities: CVE-2025-22868, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181...

CLEANSTART-2026-JS92568 Security fixes in postgres-operator 1.13.0-r2

Package postgres-operator version 1.13.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-FZ96699 Security fixes in postgres-operator 1.13.0-r1

Package postgres-operator version 1.13.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-5cgq-3rg8-m6cv, ghsa-rm3j-f69w-wqmq...

CLEANSTART-2026-LM01254 Security fixes in postgres-operator-fips 1.15.1-r0

Package postgres-operator-fips version 1.15.1-r0 fixes 3 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-25679...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, dynamic-localpv-provisioner, falcoctl, k3s, rancher-fleet, kubevela, vcluster, kpt, aws-node-termination-handler, headlamp, k8sgpt-operator, kubernetes-dashboard-api, trivy-operator, argo-workflows, istio, k8sgpt, gitlab-runner, jitsucom-bulker,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, dynamic-localpv-provisioner, falcoctl, k3s, rancher-fleet, kubevela, vcluster, kpt, aws-node-termination-handler, headlamp, k8sgpt-operator, kubernetes-dashboard-api, trivy-operator, argo-workflows, istio, k8sgpt, gitlab-runner, jitsucom-bulker,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: mockery, k3s, yunikorn-web, buf, aws-node-termination-handler, harbor-scanner-trivy, kind, speedtest-go, smokescreen, vault-k8s, k3d, cri-tools, cue, openbao-k8s, prometheus-pushgateway, nri-consul, terraform-provider-azapi, cloud-sql-proxy, boring-registry,...

CLEANSTART-2026-WI06218 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.15.1-r0

Multiple security vulnerabilities affect the postgres-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: restic, yunikorn-web, secrets-store-csi-driver-provider-gcp, kind, speedtest-go, crossplane-provider-aws-rds, smokescreen, src, ratify, cri-tools, openbao-k8s, prometheus-pushgateway, nri-consul, terraform-provider-azapi, opentelemetry-collector-contrib,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: restic, yunikorn-web, secrets-store-csi-driver-provider-gcp, kind, speedtest-go, crossplane-provider-aws-rds, smokescreen, src, ratify, cri-tools, openbao-k8s, prometheus-pushgateway, nri-consul, terraform-provider-azapi, opentelemetry-collector-contrib,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: restic, yunikorn-web, secrets-store-csi-driver-provider-gcp, kind, wazero, speedtest-go, crossplane-provider-aws-rds, smokescreen, src, ratify, cri-tools, openbao-k8s, prometheus-pushgateway, nri-consul, terraform-provider-azapi, opentelemetry-collector-contrib,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, grafana-mimir, caddy-fips, apache-exporter, azure-ipam, metacontroller, crossplane-aws-provider-fips, nri-f5-fips, jupyterhub-k8s-image-awaiter, pgpool2exporter, milvus, azure-workload-identity-webhook, longhorn-share-manager-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, grafana-mimir, caddy-fips, apache-exporter, azure-ipam, metacontroller, crossplane-aws-provider-fips, nri-f5-fips, jupyterhub-k8s-image-awaiter, pgpool2exporter, milvus, azure-workload-identity-webhook, longhorn-share-manager-fips,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: grafana-mimir, caddy-fips, nri-memcached, metacontroller, kuberay-operator, ferretdb, nri-rabbitmq, temporal-ui-server-fips, k3s, hello-world-golang, velero-fips, kube-fluentd-operator, kiam, src, fluent-bit-plugin-loki, fulcio-fips, nri-kafka, crossplane-provider-aw...