CLEANSTART-2026-GE45898 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.20.1-r0

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IP78312 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-pc3f-x583-g7j2 applied in versions: 2.19.2-r0, 2.19.2-r1, 2.19.2-r2, 2.19.2-r3

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: bom, flannel, opencost, terraform, ytt, dynamic-localpv-provisioner, local-path-provisioner, nats-top, cert-manager-cmctl, kine, crossplane-provider-aws-rds, mesosphere-vsphere-csi, nri-jmx, redis-operator, azurefile-csi, kserve-modelmesh-serving, aws-flb-cloudwatch,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: bom, flannel, http-echo, opencost, terraform, ytt, dynamic-localpv-provisioner, local-path-provisioner, nats-top, cert-manager-cmctl, kine, crossplane-provider-aws-rds, mesosphere-vsphere-csi, langfuse, nri-nginx, redis-operator, nri-rabbitmq, azurefile-csi,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: flannel, local-path-provisioner, nats-top, redis-operator, mesosphere-vsphere-csi, kserve-modelmesh-serving, mountpoint-s3-csi-driver, nginx-prometheus-exporter, osv-scanner, spire-controller-manager, kuberlr, pgpool2exporter, sbom-scorecard, protoc-gen-go, kubecolor...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: flannel, local-path-provisioner, nats-top, redis-operator, mesosphere-vsphere-csi, kserve-modelmesh-serving, mountpoint-s3-csi-driver, nginx-prometheus-exporter, osv-scanner, spire-controller-manager, kuberlr, pgpool2exporter, sbom-scorecard, protoc-gen-go, kubecolor...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: bom, flannel, opencost, terraform, ytt, dynamic-localpv-provisioner, local-path-provisioner, nats-top, cert-manager-cmctl, kine, crossplane-provider-aws-rds, mesosphere-vsphere-csi, nri-jmx, redis-operator, azurefile-csi, kserve-modelmesh-serving, aws-flb-cloudwatch,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: gosu, pguser, contour, kubo, goreleaser, terraform-provider-azapi-fips, nri-haproxy, aws-sigv4-proxy-fips, helm-diff, cert-manager-csi-driver-fips, nri-couchbase-fips, kubescape-operator-fips, grafana-beyla, kyverno-policy-reporter-plugins-kyverno, nova-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: gosu, pguser, contour, kubo, goreleaser, terraform-provider-azapi-fips, nri-haproxy, aws-sigv4-proxy-fips, helm-diff, cert-manager-csi-driver-fips, nri-couchbase-fips, kubescape-operator-fips, grafana-beyla, kyverno-policy-reporter-plugins-kyverno, nova-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: gosu, pguser, contour, kubernetes-csi-driver-hostpath, kubo, goreleaser, terraform-provider-azapi-fips, aws-sigv4-proxy-fips, helm-diff, cert-manager-csi-driver-fips, kubescape-operator-fips, grafana-beyla, kyverno-policy-reporter-plugins-kyverno, nova-fips,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: gosu, pguser, contour, kubernetes-csi-driver-hostpath, kubo, goreleaser, terraform-provider-azapi-fips, nri-haproxy, aws-sigv4-proxy-fips, helm-diff, cert-manager-csi-driver-fips, flannel-cni-plugin-fips, nri-couchbase-fips, kubescape-operator-fips, grafana-beyla,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: gosu, pguser, contour, kubernetes-csi-driver-hostpath, kubo, goreleaser, terraform-provider-azapi-fips, nri-haproxy, aws-sigv4-proxy-fips, helm-diff, cert-manager-csi-driver-fips, flannel-cni-plugin-fips, nri-couchbase-fips, kubescape-operator-fips, grafana-beyla,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: gosu, pguser, contour, kubernetes-csi-driver-hostpath, kubo, goreleaser, terraform-provider-azapi-fips, nri-haproxy, aws-sigv4-proxy-fips, helm-diff, cert-manager-csi-driver-fips, flannel-cni-plugin-fips, nri-couchbase-fips, kubescape-operator-fips, grafana-beyla,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: gosu, pguser, contour, kubernetes-csi-driver-hostpath, kubo, goreleaser, terraform-provider-azapi-fips, nri-haproxy, aws-sigv4-proxy-fips, helm-diff, cert-manager-csi-driver-fips, flannel-cni-plugin-fips, nri-couchbase-fips, kubescape-operator-fips, grafana-beyla,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, k8ssandra-operator, contour, kubernetes-csi-driver-hostpath, goreleaser, cadvisor, cosign-fips, kubevela, crossplane-provider-aws-dynamodb, grafana-operator, etcd, kubeflow-katib, cass-operator-fips-no-pvc-delete,...

resource-agents security update

4.1.1-68 - azure-lb: fix redirect issue Resolves: rhbz1850778 4.1.1-67 - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz1846733 4.1.1-65 - azure-events: handle exceptions in urlopen Resolves: rhbz1845574 4.1.1-64 - nfsserver: fix NFSv4-only support - azure-events: new resource...

CVE-2015-0862

Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...

CVE-2015-0862

Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...

CVE-2015-0862

Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...