CLEANSTART-2026-VJ20703 Security fixes in postgres-operator 1.15.1-r1

Package postgres-operator version 1.15.1-r1 fixes 24 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-XX81961 Security fixes in postgres-operator 1.12.2-r2

Package postgres-operator version 1.12.2-r2 fixes 48 vulnerabilities: CVE-2025-22868, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181...

CLEANSTART-2026-JS92568 Security fixes in postgres-operator 1.13.0-r2

Package postgres-operator version 1.13.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-FZ96699 Security fixes in postgres-operator 1.13.0-r1

Package postgres-operator version 1.13.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-5cgq-3rg8-m6cv, ghsa-rm3j-f69w-wqmq...

PT-2026-85882

Package postgres-operator version 1.13.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-5cgq-3rg8-m6cv, ghsa-rm3j-f69w-wqmq...

CLEANSTART-2026-LM01254 Security fixes in postgres-operator-fips 1.15.1-r0

Package postgres-operator-fips version 1.15.1-r0 fixes 3 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-25679...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: eksctl, argo-rollouts, redis-operator, emissary, teleport, consul-k8s, kiali, velero, k8sgpt, kargo, k9s, kubescape, k3s, gitlab-kas, k8ssandra-client, skaffold, dynamic-localpv-provisioner, docker-cli-buildx, k8sgpt-operator, trivy-operator, argocd-image-updater,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: eksctl, argo-rollouts, redis-operator, emissary, teleport, consul-k8s, kiali, velero, k8sgpt, kargo, k9s, kubescape, k3s, gitlab-kas, k8ssandra-client, skaffold, dynamic-localpv-provisioner, docker-cli-buildx, k8sgpt-operator, trivy-operator, argocd-image-updater,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter, buf, kubescape, kyverno-policy-reporter-ui, mountpoint-s3-csi-driver, lazygit, nuclei, mcp-grafana, yunikorn-k8shim, mkcert, crossplane-provider-azure-storage, nsc, percona-server-mongodb-operator, configmap-reload, ingress-nginx-controller...

CLEANSTART-2026-WI06218 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.15.1-r0

Multiple security vulnerabilities affect the postgres-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter, kubescape, kyverno-policy-reporter-ui, mountpoint-s3-csi-driver, tempo, opentelemetry-collector-contrib, mcp-grafana, crossplane-provider-aws-sqs, mkcert, yunikorn-k8shim, octo-sts, restic, nsc, tfsec, minify, percona-server-mongodb-operato...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter, kubescape, kyverno-policy-reporter-ui, mountpoint-s3-csi-driver, tempo, opentelemetry-collector-contrib, mcp-grafana, crossplane-provider-aws-sqs, mkcert, yunikorn-k8shim, octo-sts, restic, nsc, tfsec, minify, percona-server-mongodb-operato...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter, kubescape, kyverno-policy-reporter-ui, mountpoint-s3-csi-driver, tempo, opentelemetry-collector-contrib, kratos, mcp-grafana, blobfuse2, crossplane-provider-aws-sqs, mkcert, yunikorn-k8shim, octo-sts, restic, nsc, tfsec, minify,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, ytt, goose, langfuse-fips, otel-cli, flux-helm-controller, smarter-device-manager, cluster-api, snyk-cli, sqlexporter, k8ssandra-operator, flux-operator-fips, kafka-proxy,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, ytt, goose, langfuse-fips, otel-cli, flux-helm-controller, smarter-device-manager, cluster-api, snyk-cli, sqlexporter, k8ssandra-operator, flux-operator-fips, kafka-proxy,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, ytt, gitsign, opa-fips, smarter-device-manager, flux-helm-controller, snyk-cli, k8ssandra-operator, kafka-proxy, gobump, neuvector-sigstore-interface, dagdotdev, policy-controller-fips, lazygit, k3d, vexctl, protoc-gen-go,...