CLEANSTART-2026-VJ20703 Security fixes in postgres-operator 1.15.1-r1

Package postgres-operator version 1.15.1-r1 fixes 24 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-XX81961 Security fixes in postgres-operator 1.12.2-r2

Package postgres-operator version 1.12.2-r2 fixes 48 vulnerabilities: CVE-2025-22868, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181...

CLEANSTART-2026-JS92568 Security fixes in postgres-operator 1.13.0-r2

Package postgres-operator version 1.13.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-FZ96699 Security fixes in postgres-operator 1.13.0-r1

Package postgres-operator version 1.13.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-5cgq-3rg8-m6cv, ghsa-rm3j-f69w-wqmq...

CLEANSTART-2026-LM01254 Security fixes in postgres-operator-fips 1.15.1-r0

Package postgres-operator-fips version 1.15.1-r0 fixes 3 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-25679...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: gitlab-runner, cluster-api, istio, percona-server-mongodb-operator, trivy-operator, juicefs-csi-driver, cert-manager-istio-csr, kiali, zarf, trivy, kargo, emissary, kubevela, aws-node-termination-handler, argo-workflows, skaffold, cloudnative-pg, datadog-agent,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: gitlab-runner, cluster-api, istio, percona-server-mongodb-operator, trivy-operator, juicefs-csi-driver, cert-manager-istio-csr, kiali, zarf, trivy, kargo, emissary, kubevela, aws-node-termination-handler, argo-workflows, skaffold, cloudnative-pg, datadog-agent,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, yace, vendir, chisel, osv-scanner, aws-s3-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, gitlab-kas, lazygit, aws-flb-cloudwatch,...

CLEANSTART-2026-WI06218 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.15.1-r0

Multiple security vulnerabilities affect the postgres-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-route53, yace, thanos, zarf, aws-s3-controller, flux-source-controller, ytt, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, gitlab-kas, logstash-exporter, azure-ipam, terraform-provider-random,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-route53, yace, thanos, zarf, aws-s3-controller, flux-source-controller, ytt, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, gitlab-kas, logstash-exporter, azure-ipam, terraform-provider-random,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-route53, yace, thanos, zarf, aws-s3-controller, flux-source-controller, ytt, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, gitlab-kas, logstash-exporter, azure-ipam, terraform-provider-random,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: beats-fips, neuvector-dbgen-fips, prometheus-beat-exporter, restic-fips, kyverno-policy-reporter-ui, kubernetes-event-exporter-fips, prometheus-postgres-exporter, crossplane-provider-aws-dynamodb-fips, grpcurl-fips, ingress-nginx-controller-fips, argo-rollouts-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: beats-fips, neuvector-dbgen-fips, prometheus-beat-exporter, restic-fips, kyverno-policy-reporter-ui, kubernetes-event-exporter-fips, prometheus-postgres-exporter, crossplane-provider-aws-dynamodb-fips, grpcurl-fips, ingress-nginx-controller-fips, argo-rollouts-fips,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, neuvector-dbgen-fips, prometheus-beat-exporter, age, restic-fips, kyverno-policy-reporter-ui, prometheus-postgres-exporter, capslock, nri-rabbitmq, gobuster, pombump, addon-resizer, fq, spire-server, gcsfuse, velero, node-problem-detector,...