11796 matches found
CLEANSTART-2026-XP58111 When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11
Multiple security vulnerabilities affect the tomcat9 package. When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11. See references for individual vulnerability details...
CLEANSTART-2026-ZM51114 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...
CLEANSTART-2026-WP20592 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...
CLEANSTART-2026-SV79070 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...
CLEANSTART-2026-ME47927 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
CLEANSTART-2026-BZ92766 beego is an open-source web framework for the Go programming language
Multiple security vulnerabilities affect the harbor-fips package. beego is an open-source web framework for the Go programming language. See references for individual vulnerability details...
CLEANSTART-2026-IL25782 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the istio-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...
CLEANSTART-2026-LP38773 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the kube-state-metrics-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-MI26039 Within HostnameError
Multiple security vulnerabilities affect the step-issuer package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-EZ98723 Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a ...
Multiple security vulnerabilities affect the ffmpeg package. Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the...
CLEANSTART-2026-DV71311 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...
CLEANSTART-2026-RK66393 multer is a middleware for handling multipart/form-data in Node
Security vulnerability affects the n8n package. multer is a middleware for handling multipart/form-data in Node...
CLEANSTART-2026-HO68117 vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3...
CLEANSTART-2026-EQ87084 Connect2id Nimbus JOSE+JWT before v7
Security vulnerability affects the apache-hive package. Connect2id Nimbus JOSE+JWT before v7...
CLEANSTART-2026-KA42623 AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio
Security vulnerability affects the airflow-3 package. AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio...
CLEANSTART-2026-FC13167 aiosmtplib before 5
CVE-2026-90467 affects multiple packages. aiosmtplib before 5. See references for individual vulnerability details...
CLEANSTART-2026-FC44731 Apache Airflow FAB provider: deactivating a user account does not stop tokens issued to that account before deactivation
CVE-2026-82310 affects multiple packages. Apache Airflow FAB provider: deactivating a user account does not stop tokens issued to that account before deactivation. See references for individual vulnerability details...
CLEANSTART-2026-GP78521 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84304 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-KN43296 OpenTelemetry-Go is the Go implementation of OpenTelemetry
CVE-2026-81870 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CLEANSTART-2026-QJ88718 flaw was found in the keycloak-services component of Red Hat Build of Keycloak
Security vulnerability affects the keycloak package. A flaw was found in the keycloak-services component of Red Hat Build of Keycloak...
CLEANSTART-2026-KJ02957 pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service
CVE-2026-66257 affects multiple packages. A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. See references for individual vulnerability details...
CLEANSTART-2026-TU13335 RabbitMQ amqp091-go is a Go AMQP 0
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
CLEANSTART-2026-LC07021 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
Security vulnerability affects the vault package. Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0
CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GK32867 Security fix for CVE-2026-1703 applied in: k8s-sidecar 1.25.2-r0, kubernetes-csi-driver-nfs-fips 4.13.0-r0, python3 3.11.14-r0, python3 3.12.12-r0
CVE-2026-1703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KO57202 Security fix for CVE-2025-13281 applied in: argo-cd 3.1.12-r0, argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, calico-fips 3.28.5-r4, ip-masq-agent 2.12.6-r1, local-static-provisioner 2.8.0-r2
CVE-2025-13281 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-LS88076 Security fix for CVE-2026-27139 applied in: apache-nifi 2.10.0-r4, argo-cd 3.2.7-r1, argo-cd-fips 3.2.5-r0, argo-workflows 3.6.18-r2, argo-workflows 3.7.8-r1, argo-workflows 3.7.9-r1, argo-workflows-fips 3.7.8-r3, aws-ebs-csi-driver 1.54.0-r1, aws-efs-csi-driver 2.2.0-r1, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-flb-cloudwatch 1.9.4-r0, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, aws-privateca-issuer 1.7.0-r0, aws-privateca-issuer-fips 1.7.0-r1, cadvisor 0.56.2-r0, cadvisor-fips 0.55.1-r0, calico-fips 3.28.5-r4, calico-fips 3.31.2-r2, cass-operator 1.28.1-r0, cert-manager-fips 1.17.4-r1, certificate-transparency-trillian-ctserver 1.3.2-r1, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cilium 1.17.15-r0, cilium 1.18.9-r0, cilium 1.19.3-r0, cloudnative-pg-fips 1.24.4-r2, cloudnative-pg-fips 1.25.4-r2, cloudnative-pg-fips 1.26.3-r0, cloudnative-pg-fips 1.27.3-r0, cloudnative-pg-fips 1.28.1-r0, cni-plugin-flannel 1.6.0-r0, configmap-reload 0.15.0-r0, consul-fips 1.22.2-r0, coredns 1.14.1-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, crossplane 2.0.2-r1, crossplane-provider-aws 2.3.0-r1, dcgm-exporter 4.5.1-r0, descheduler 0.34.0-r2, distribution 3.0.0-r1, druid-exporter-fips 0.10-r3, druid-exporter-fips 0.11-r4, druid-exporter-fips 0.8-r2, druid-exporter-fips 0.9-r2, dynamic-localpv-provisioner 4.4.0-r3, eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, eks-distro-kube-proxy-fips 1.35.7-r1, eks-distro-kube-scheduler-fips 1.34.3-r0, envoy-ratelimit 0.0.0_git20251231-r0, esbuild 0.25.0-r0, external-dns 0.18.0-r1, external-secrets-fips 0.17.0-r2, fluent-bit-plugin-loki 3.6.5-r0, fluent-operator 3.6.0-r0, fluent-operator-fips 3.3.0-r7, fluent-operator-fips 3.4.0-r7, fluent-operator-fips 3.5.0-r1, fluent-operator-fips 3.6.0-r3, fluent-operator-fips 3.7.0.-r1, flux-image-automation-controller-fips 4.0.1-r0, flux-notification-controller-fips 1.5.0-r0, git-lfs 3.7.0-r3, git-sync 4.5.1-r1, gitlab-pages 18.7.1-r0, gitlab-pages-fips 18.7.1-r0, go-discover-fips 0_git20250325-r2, gomplate 4.3.3-r0, grafana-alloy-fips 1.12.1-r2, grafana-mimir 3.0.2-r0, grafana-rollout-operator 0.35.0-r0, haproxy-ingress 0.15.1-r0, harbor 2.12.4-r0, harbor 2.13.5-r0, harbor 2.14.3-r0, harbor 2.15.0-r0, harbor-fips 2.13.4-r1, harbor-fips 2.13.5-r0, harbor-fips 2.14.2-r2, harbor-fips 2.14.3-r0, harbor-fips 2.15.0-r0, harbor-registry 3.0.0.1-r3, harbor-registry-fips 3.0.0.1-r4, helm 3.19.5-r0, helm 3.20.0-r0, helm 4.0.1-r1, helm 4.1.0-r1, helm 4.1.1-r2, helm-operator-fips 1.41.1-r2, hubble-ui 0.13.3-r1, hubble-ui-fips 0.13.3-r1, ip-masq-agent 2.12.6-r1, istio 1.28.3-r0, istio-fips 1.25.5-r2, istio-fips 1.26.8-r0, istio-fips 1.27.7-r1, istio-fips 1.28.4-r1, istio-fips 1.29.1-r0, istio-pilot-discovery-fips 1.28.3-r1, jitsucom-bulker 2.11.913-r1, k8ssandra-client-fips 0.5.0-r7, k8ssandra-client-fips 0.6.4-r6, k8ssandra-client-fips 0.7.0-r4, k8ssandra-client-fips 0.8.10-r0, k8ssandra-client-fips 0.8.8-r0, k8ssandra-client-fips 0.8.9-r0, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.29.0-r1, kafka 4.0.1-r3, kafka-fips 4.0.1-r3, kafka_exporter-fips 1.6.0-r0, kafka_exporter-fips 1.7.0-r1, karpenter-fips 1.8.6-r1, karpenter-fips 1.9.0-r0, keda-fips 2.18.3-r3, kserve 0.16.0-r0, kserve-rest-proxy 0.12.0-r1, kube-rbac-proxy 0.20.2-r1, kube-rbac-proxy-fips 0.20.2-r1, kube-state-metrics 2.16.0-r3, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.0.4-r0, kubernetes 1.34.1-r2, kubernetes-csi-driver-nfs-fips 4.12.1-r1, kubernetes-csi-driver-nfs-fips 4.13.0-r0, kubernetes-csi-external-attacher 4.10.0-r0, kubernetes-csi-external-attacher-fips 4.10.0-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r0, kubernetes-csi-external-provisioner-fips 6.2.0-r0, kubernetes-csi-external-resizer 2.0.0-r0, kubernetes-csi-external-resizer-fips 2.0.0-r0, kubernetes-csi-external-snapshotter-fips 8.4.0-r0, kubernetes-csi-external-snapshotter-fips 8.5.0-r0, kubernetes-csi-livenessprobe-fips 2.18.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-csi-node-driver-registrar-fips 2.15.0-r1, kubernetes-csi-node-driver-registrar-fips 2.16.0-r0, kubernetes-dashboard 7.14.0-r0, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubernetes-dashboard-auth 1.4.0-r1, kubernetes-dashboard-auth-fips 1.4.0-r1, kubernetes-dashboard-metrics-scraper 1.2.2-r1, kubernetes-dashboard-metrics-scraper-fips 1.2.2-r1, kubernetes-dashboard-web 1.7.0-r0, kubernetes-dns-node-cache 1.26.7-r1, kubernetes-dns-node-cache-fips 1.26.7-r2, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, kubernetes-fips 1.35.0-r0, kubernetes-replicator-fips 2.12.2-r1, kubescape 3.0.47-r0, kured 1.20.0-r0, kustomize 5.7.1-r3, kyverno-fips 1.13.6-r10, kyverno-fips 1.16.1-r3, kyverno-fips 1.16.3-r4, kyverno-fips 1.17.1-r3, kyverno-policy-reporter-fips 3.3.3-r4, kyverno-policy-reporter-fips 3.4.2-r4, kyverno-policy-reporter-fips 3.5.0-r4, kyverno-policy-reporter-fips 3.7.3-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r6, kyverno-policy-reporter-kyverno-plugin-fips 1.5.2-r3, linkerd2 25.12.3-r0, local-static-provisioner 2.8.0-r2, minio-operator 7.1.1-r3, minio-operator-fips 5.0.19-r0, minio-operator-fips 6.0.4-r9, minio-operator-fips 7.0.1-r8, minio-operator-fips 7.1.1-r9, mongodb 7.0.30-r0, mongodb 8.0.19-r0, neuvector-fips 5.4.8-r0, newrelic-fluent-bit-output 2.4.0-r1, newrelic-infrastructure-agent 1.71.4-r0, newrelic-nri-kube-events 2.16.4-r1, newrelic-prometheus-configurator 2.4.4-r1, nginx-prometheus-exporter 1.5.1-r1, nginx-prometheus-exporter-fips 1.5.1-r1, node-feature-discovery 0.18.3-r2, node-problem-detector 0.8.19-r2, nri-kubernetes 3.51.2-r0, nvidia-container-toolkit 1.19.0-r0, openbao 2.4.3-r1, openbao-fips 2.2.2-r6, openbao-fips 2.3.2-r4, openbao-fips 2.5.1-r1, opensearch-k8s-operator-fips 2.5.1-r2, opensearch-k8s-operator-fips 2.6.1-r2, opensearch-k8s-operator-fips 2.6.1-r7, opensearch-k8s-operator-fips 2.7.0-r8, opentelemetry-collector-contrib-fips 0.144.0-r3, opentofu-fips 1.10.9-r2, opentofu-fips 1.11.5-r1, opentofu-fips 1.7.10-r2, opentofu-fips 1.8.11-r2, opentofu-fips 1.9.4-r2, percona-xtradb-cluster-operator-fips 1.18.0-r5, pmm 3.5.0-r0, postgres-operator-fips 1.15.1-r0, prom-mysqld-exporter-fips 0.18.0-r1, prometheus-elasticsearch-exporter 1.10.0-r1, prometheus-mongodb-exporter 0.47.2-r1, prometheus-mongodb-exporter-fips 0.47.2-r1, prometheus-mysqld-exporter 0.18.0-r1, prometheus-node-exporter 1.8.0-r3, prometheus-operator 0.87.1-r1, prometheus-operator 0.89.0-r0, prometheus-redis-exporter 1.82.0-r0, prometheus-redis-exporter-fips 1.77.0-r3, prometheus-redis-exporter-fips 1.78.0-r3, prometheus-redis-exporter-fips 1.79.0-r3, prometheus-redis-exporter-fips 1.80.2-r0, prometheus-redis-exporter-fips 1.81.0-r0, prometheus-statsd-exporter 0.28.0-r1, promxy 0.0.93-r1, pulumi-kubernetes-operator 0.18.0-r1, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, restic 0.18.0-r0, runc 1.1.14-r0, sealed-secrets 0.33.1-r0, sealed-secrets 0.34.0-r0, sigstore-scaffolding 0.7.29-r2, sigstore-scaffolding 0.7.31-r2, smarter-device-manager-fips 1.20.12-r2, spire-server 1.14.1-r3, stakater-reloader 1.4.14-r0, stakater-reloader-fips 1.2.1-r3, stakater-reloader-fips 1.3.0-r2, step-issuer 0.9.11-r1, syft 1.39.0-r2, tekton-chains 0.26.0-r3, tekton-chains-fips 0.26.0-r4, tekton-pipelines 1.5.0-r4, temporal 1.5.1-r0, temporal-server-fips 1.29.2-r1, terragrunt-fips 0.94.0-r1, terragrunt-fips 0.95.1-r1, terragrunt-fips 0.96.1-r1, terragrunt-fips 0.97.2-r1, terragrunt-fips 0.98.0-r1, terragrunt-fips 0.99.4-r2, tigera-operator 1.41.1-r0, timoni 0.25.2-r0, trillian 1.7.2-r1, trino 479-r0, trust-manager-fips 0.20.3-r0, trust-manager-fips 0.21.1-r0, vault 1.21.2-r0, vault-fips 1.21.2-r1, velero 1.17.2-r2, velero-fips 1.17.1-r1, velero-fips 1.17.2-r2, velero-fips 1.18.0-r0, velero-plugin-for-aws 1.10.1-r1, velero-plugin-for-aws 1.12.2-r2, velero-plugin-for-aws 1.13.1-r3, velero-plugin-for-csi 0.7.1-r2, velero-plugin-for-gcp-fips 1.13.2-r0, vertical-pod-autoscaler 1.5.1-r3, vertical-pod-autoscaler-fips 1.5.1-r2, victoriametrics-operator 0.65.0-r1, victoriametrics-operator-fips 0.65.0-r2, wave 0.11.0-r0, wave-fips 0.9.0-r3, weaviate 1.35.2-r1, whereabouts 0.9.2-r1, yunikorn-k8shim-fips 1.7.0-r1, yunikorn-web 1.7.0-r0, zot 2.1.13-r0
CVE-2026-27139 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-MW19809 Security fix for CVE-2026-22735 applied in: activemq 5.19.8-r3, activemq 6.1.8-r1, activemq 6.2.3-r0, apache-nifi 2.6.0-r3, kafka-ui 1.2.0-r4, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, thingsboard 4.3.0.1-r2
CVE-2026-22735 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-QF32596 Security fix for GHSA-xw73-rw38-6vjc applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, paranoia 0.2.1-r0
GHSA-xw73-rw38-6vjc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WP38878 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the cloudnative-pg-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-GE74044 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. S...
CLEANSTART-2026-ED42524 Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded...
Multiple security vulnerabilities affect the spring-boot package. Applications which accept user-supplied Spring Expression Language SpEL expressions may be vulnerable to a Denial of Service DoS attack if the evaluation of a SpEL expression triggers unbounded cache growth. See references for...
CLEANSTART-2026-DB46993 Prometheus is an open-source monitoring system and time series database
Multiple security vulnerabilities affect the prometheus-operator package. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...
CLEANSTART-2026-BY91066 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Multiple security vulnerabilities affect the dynatrace-operator package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
CLEANSTART-2026-FR63847 yawkat LZ4 Java provides LZ4 compression for Java
Multiple security vulnerabilities affect the elasticsearch package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...
CLEANSTART-2026-DC71490 Security fixes in keda 2.20.2-r1
Package keda version 2.20.2-r1 fixes 1 vulnerabilities: ghsa-gcjh-h69q-9w9g...
CLEANSTART-2026-CY42435 Security fixes in amazon-cloudwatch-agent 1.300071.0-r1
Package amazon-cloudwatch-agent version 1.300071.0-r1 fixes 36 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...
CLEANSTART-2026-PJ87430 Security fixes in rabbitmq-messaging-topology-operator 1.2.1-r1
Package rabbitmq-messaging-topology-operator version 1.2.1-r1 fixes 8 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...
CLEANSTART-2026-FI83495 Security fixes in ollama 0.32.0-r1
Package ollama version 0.32.0-r1 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...
CLEANSTART-2026-CD03295 Security fixes in rancher-agent 2.11.15-r1
Package rancher-agent version 2.11.15-r1 fixes 28 vulnerabilities: CVE-2026-53492, CVE-2026-50195, CVE-2026-53489, CVE-2024-40635, CVE-2024-25621...
CLEANSTART-2026-KC30064 Security fixes in akhq 0.27.1-r5
Package akhq version 0.27.1-r5 fixes 27 vulnerabilities: CVE-2026-58062, CVE-2026-59638, CVE-2026-59646, CVE-2026-12802, CVE-2026-59639...
CLEANSTART-2026-SK52724 Security fixes in cosign 3.1.2-r1
Package cosign version 3.1.2-r1 fixes 9 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-49835, ghsa-9c54-x2g4-v92j...
CLEANSTART-2026-MI51590 Security fixes in kserve-storage-controller 0.19.0-r0
Package kserve-storage-controller version 0.19.0-r0 fixes 91 vulnerabilities: CVE-2024-12254, CVE-2024-12718, CVE-2024-6232, CVE-2024-7592, CVE-2024-9287...
CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0
Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...
CLEANSTART-2026-RD68609 Security fixes in tigera-operator-fips 1.40.13-r1
Package tigera-operator-fips version 1.40.13-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...
CLEANSTART-2026-OF17843 Security fixes in wso2is 7.0.0-r0
Package wso2is version 7.0.0-r0 fixes 17 vulnerabilities: CVE-2025-8671, CVE-2025-23184, CVE-2025-48734, CVE-2025-48795, CVE-2025-48924...
CLEANSTART-2026-JZ16335 Security fixes in keycloak 26.6.4-r2
Package keycloak version 26.6.4-r2 fixes 4 vulnerabilities: ghsa-r7wm-3cxj-wff9, CVE-2026-55851, CVE-2026-59919, CVE-2026-55831...
CLEANSTART-2026-YI37990 Security fixes in kafka 4.1.1-r0
Package kafka version 4.1.1-r0 fixes 1 vulnerabilities: ghsa-vc5p-v9hr-52mj...
CLEANSTART-2026-QZ83575 Security fixes in elastic-beats 9.2.8-r6
Package elastic-beats version 9.2.8-r6 fixes 5 vulnerabilities: CVE-2026-42151, CVE-2026-42154, CVE-2026-40179, CVE-2026-44903, ghsa-hrxh-6v49-42gf...