CVE-2026-116498

A missing authorization flaw was found in Kiali, where the namespace health, ztunnel pod log, and ztunnel configuration dump API endpoints returned data about namespaces the caller had no RBAC access to, reading ztunnel data with the Kiali ServiceAccount without checking the caller's permissions...

CLEANSTART-2026-CC86390 Security fix for GHSA-q83h-524g-xf6h applied in: ztunnel-fips 1.29.8-r0, ztunnel-fips 1.30.5-r0

GHSA-q83h-524g-xf6h affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-KZ08626 Security fix for GHSA-pg9f-39pc-qf8g applied in: ztunnel-fips 1.25.5-r0

Security vulnerability affects the ztunnel-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-EX68648 Security fix for GHSA-4p46-pwfr-66x6 applied in: ztunnel-fips 1.25.5-r0

Security vulnerability affects the ztunnel-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-HK10192 Security fix for GHSA-c86p-w88r-qvqr applied in: ztunnel-fips 1.25.5-r0

Security vulnerability affects the ztunnel-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-DK11361 Security fix for GHSA-v7pc-74h8-xq2h applied in: ztunnel-fips 1.25.5-r0

Security vulnerability affects the ztunnel-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-IN27647 Security fix for GHSA-37wc-h8xc-5hc4 applied in: ztunnel-fips 1.25.5-r0

Security vulnerability affects the ztunnel-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UC60244 Security fix for GHSA-xwfj-jgwm-7wp5 applied in: ztunnel-fips 1.25.5-r0, ztunnel-fips 1.26.8-r0, ztunnel-fips 1.27.5-r1, ztunnel-fips 1.28.0-r0, ztunnel-fips 1.28.2-r0

GHSA-xwfj-jgwm-7wp5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GS01366 Security fix for GHSA-2gh3-rmm4-6rq5 applied in: ztunnel-fips 1.25.5-r0, ztunnel-fips 1.26.8-r0, ztunnel-fips 1.27.5-r1, ztunnel-fips 1.27.8-r4, ztunnel-fips 1.28.0-r0, ztunnel-fips 1.28.2-r0

GHSA-2gh3-rmm4-6rq5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-UI83674 Security fix for GHSA-rr8g-9fpq-6wmg applied in: ztunnel-fips 1.25.5-r0

Security vulnerability affects the ztunnel-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TL71866 Security fix for GHSA-rhfx-m35p-ff5j applied in: ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.5-r1, ztunnel-fips 1.29.1-r0

GHSA-rhfx-m35p-ff5j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WJ40608 Security fix for GHSA-434x-w66g-qw3r applied in: shadowsocks-rust 1.24.0-r0, wasmtime 40.0.0-r0, ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r0, ztunnel-fips 1.28.4-r0, ztunnel-fips 1.29.0-r0

GHSA-434x-w66g-qw3r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LE78036 Security fix for GHSA-r6v5-fh4h-64xc applied in: cedar 4.11.2-r1, shadowsocks-rust 1.24.0-r0, ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r0, ztunnel-fips 1.27.8-r3, ztunnel-fips 1.28.4-r0, ztunnel-fips 1.29.0-r0

GHSA-r6v5-fh4h-64xc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EL62572 Security fix for GHSA-hfpc-8r3f-gw53 applied in: ntpd-rs 1.6.2-r1, ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.29.1-r0

GHSA-hfpc-8r3f-gw53 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GZ43069 Security fix for GHSA-vw5v-4f2q-w9xf applied in: ntpd-rs 1.6.2-r1, ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.29.1-r0

GHSA-vw5v-4f2q-w9xf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OY93787 Security fix for GHSA-65p9-r9h6-22vj applied in: ntpd-rs 1.6.2-r1, ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.29.1-r0

GHSA-65p9-r9h6-22vj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KO91449 Security fix for CVE-2026-4428 applied in: ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.27.8-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.29.1-r0

CVE-2026-4428 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CP29339 Security fix for GHSA-9f94-5g5w-gf6r applied in: ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.27.8-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.28.5-r0, ztunnel-fips 1.29.1-r0

GHSA-9f94-5g5w-gf6r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JF46106 Security fix for GHSA-394x-vwmw-crm3 applied in: ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r1, ztunnel-fips 1.27.8-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.28.5-r0, ztunnel-fips 1.29.1-r0

GHSA-394x-vwmw-crm3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XA32813 Security fix for GHSA-pwjx-qhcg-rvj4 applied in: shadowsocks-rust 1.24.0-r1, ztunnel-fips 1.27.8-r4, ztunnel-fips 1.27.9-r0, ztunnel-fips 1.28.4-r1, ztunnel-fips 1.28.5-r0, ztunnel-fips 1.29.1-r0

GHSA-pwjx-qhcg-rvj4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...