CLEANSTART-2026-XX81961 Security fixes in postgres-operator 1.12.2-r2

Package postgres-operator version 1.12.2-r2 fixes 48 vulnerabilities: CVE-2025-22868, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181...

CLEANSTART-2026-JS92568 Security fixes in postgres-operator 1.13.0-r2

Package postgres-operator version 1.13.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-LM01254 Security fixes in postgres-operator-fips 1.15.1-r0

Package postgres-operator-fips version 1.15.1-r0 fixes 3 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-25679...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: envoy-gateway, docker-cli-buildx, velero, linkerd2, eksctl, datadog-agent, kubeflow-pipelines, cilium, kargo, kube-arangodb, k8sgpt, rancher-agent, jitsucom-bulker, rancher-fleet, sonobuoy, k8sgpt-operator, terraform-provider-kubernetes, aws-node-termination-handler,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: envoy-gateway, docker-cli-buildx, velero, linkerd2, eksctl, datadog-agent, kubeflow-pipelines, cilium, kargo, kube-arangodb, k8sgpt, rancher-agent, jitsucom-bulker, rancher-fleet, sonobuoy, k8sgpt-operator, terraform-provider-kubernetes, aws-node-termination-handler,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, snyk-cli, kargo, vale, jitsucom-bulker, docker-machine-driver-linode, scorecard, terraform-provider-kubernetes, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, hubble, kube-bench, zot, sriov-network-device-plugin,...

CLEANSTART-2026-WI06218 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.15.1-r0

Multiple security vulnerabilities affect the postgres-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, snyk-cli, vale, terraform-provider-kubernetes, rabbitmq-messaging-topology-operator, temporal-server, kube-bench, sriov-network-device-plugin, crossplane-provider-aws-elasticache, spire-controller-manager, gitlab-pages, stakater-reloader,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, snyk-cli, vale, terraform-provider-kubernetes, rabbitmq-messaging-topology-operator, temporal-server, kube-bench, sriov-network-device-plugin, crossplane-provider-aws-elasticache, spire-controller-manager, gitlab-pages, stakater-reloader,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, snyk-cli, vale, terraform-provider-kubernetes, rabbitmq-messaging-topology-operator, temporal-server, kube-bench, sriov-network-device-plugin, crossplane-provider-aws-elasticache, spire-controller-manager, gitlab-pages, stakater-reloader,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kong-ingress-controller, aws-nuke, kots, ko-fips, localstack, crossplane-provider-aws-efs, prometheus-node-exporter-fips, crane-fips, cloud-sql-proxy, victoriametrics-operator, kyverno, emqx-exporter-fips, seaweedfs-operator, beats-fips, maru, chronyexporter,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kong-ingress-controller, aws-nuke, kots, ko-fips, localstack, crossplane-provider-aws-efs, prometheus-node-exporter-fips, crane-fips, cloud-sql-proxy, victoriametrics-operator, kyverno, emqx-exporter-fips, seaweedfs-operator, beats-fips, maru, chronyexporter,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: kots, ko-fips, jitsucom-bulker, gops, prometheus-node-exporter-fips, cilium-cli, vt-cli, crossplane-provider-aws, ip-masq-agent, flux-kustomize-controller, nats-server, trust-manager, nri-cassandra, local-static-provisioner, dataplaneapi, aactl,...