CLEANSTART-2026-BB26789 Security fixes in spark-operator 2.3.0-r3

Package spark-operator version 2.3.0-r3 fixes 4 vulnerabilities: CVE-2026-32281, CVE-2026-32288, CVE-2026-32289, CVE-2026-32280...

CLEANSTART-2026-FM11278 Security fixes in spark-operator 2.3.0-r4

Package spark-operator version 2.3.0-r4 fixes 11 vulnerabilities: CVE-2026-39817, CVE-2026-39820, CVE-2026-39826, CVE-2026-39823, CVE-2026-42499...

CLEANSTART-2026-OD14993 Security fixes in spark-operator 2.4.0-r4

Package spark-operator version 2.4.0-r4 fixes 11 vulnerabilities: CVE-2026-39817, CVE-2026-39820, CVE-2026-39826, CVE-2026-39823, CVE-2026-42499...

CLEANSTART-2026-AR50437 Security fixes in spark-operator 2.2.1-r4

Package spark-operator version 2.2.1-r4 fixes 11 vulnerabilities: CVE-2026-39817, CVE-2026-39820, CVE-2026-39826, CVE-2026-39823, CVE-2026-42499...

CLEANSTART-2026-TD06078 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.4.0-r0, 2.4.0-r3, 2.5.0-r0, 2.5.0-r1

Multiple security vulnerabilities affect the spark-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AN32474 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.4.0-r0, 2.4.0-r3, 2.4.0-r4

Multiple security vulnerabilities affect the spark-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QU88766 Security fixes for CVE-2025-11065, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-2464-8j7c-4cjm applied in versions: 2.2.1-r0, 2.2.1-r1, 2.2.1-r4

Multiple security vulnerabilities affect the spark-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TK06108 Security fixes for CVE-2025-68121, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.3.0-r0, 2.3.0-r3, 2.3.0-r4

Multiple security vulnerabilities affect the spark-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NT10973 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.1.1-r3, 2.1.1-r6, 2.1.1-r7

Multiple security vulnerabilities affect the spark-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, falco-no-driver, kube-arangodb, oras, prometheus-alertmanager, mountpoint-s3-csi-driver, prometheus, speedtest-go, nri-mongodb, cloudprober, nri-kubernetes, nats, vt-cli, neuvector-sigstore-interface, pulumi-language-yaml, flux-helm-controller,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, falco-no-driver, kube-arangodb, oras, prometheus-alertmanager, mountpoint-s3-csi-driver, prometheus, speedtest-go, nri-mongodb, cloudprober, nri-kubernetes, nats, vt-cli, neuvector-sigstore-interface, pulumi-language-yaml, flux-helm-controller,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, falco-no-driver, kube-arangodb, oras, prometheus-alertmanager, mountpoint-s3-csi-driver, prometheus, speedtest-go, nri-mongodb, cloudprober, nri-kubernetes, nats, vt-cli, neuvector-sigstore-interface, pulumi-language-yaml, flux-helm-controller,...

CLEANSTART-2026-UK11127 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the spark-operator package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

CLEANSTART-2026-WK32717 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the spark-operator package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: azure-service-operator, nri-haproxy, tempo, dgraph, witness, ip-masq-agent, cluster-api, nri-redis, libnvidia-container, rabbitmq-messaging-topology-operator, kubecolor, chartmuseum, nats-server-config-reloader, aws-eks-pod-identity-agent, undock, kube-bench, caddy,...

GHSA-3WGM-2GW2-VH5M vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes...

CVE-2025-1767 vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, nodetaint, kubeflow-pipelines, kubernetes-dns-node-cache, argocd-image-updater, kubernetes, spark-operator, aws-efs-csi-driver, kubernetes-csi-driver-hostpath, local-static-provisioner...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, nodetaint, kubeflow-pipelines, kubernetes-dns-node-cache, argocd-image-updater, kubernetes, spark-operator, aws-efs-csi-driver, kubernetes-csi-driver-hostpath, local-static-provisioner...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: spark-operator, aws-efs-csi-driver-fips, ip-masq-agent, prometheus-adapter, aws-efs-csi-driver, nodetaint, aws-ebs-csi-driver, kubernetes-dns-node-cache...