CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1

Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...

CLEANSTART-2026-OP27654 Security fixes in kubernetes-fips 1.35.0-r0

Package kubernetes-fips version 1.35.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-ON70708 Security fixes in opentofu-fips 1.11.5-r1

Package opentofu-fips version 1.11.5-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-CL16763 Security fixes in helm 4.0.1-r1

Package helm version 4.0.1-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142...

Medium: amazon-ecr-credential-helper

Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...