Vulnerability Database

ECHO-346c-c9be-1f82

Echo:Go/github.com/open-telemetry/opentelemetry-operator

See record for full details 28 Sep

Fix available

CLEANSTART-2026-LP17262

CleanStart/kube-logging-operator

Security fix for ghsa-cxh2-4639-vmc5 applied in: kube-logging-operator 6.5.2-r1, kube-logging-operator 6.6.0-r1 18 Sep

Fix available

CVE-2026-47701

github.com/open-telemetry/opentelemetry-operator

OpenTelemetry Operator: ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth 14 Sep

Fix available
Severity - 7.7 (High)

GO-2026-5339

Go/github.com/open-telemetry/opentelemetry-operator

OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth in github.com/open-telemetry/opentelemetry-operator 25 Jun

Fix available

MINI-72fx-h2g4-mj4w

MinimOS/kserve-localmodel-fips
MinimOS/kserve-localmodelnode-agent-fips
MinimOS/kserve-manager-fips

See record for full details 18 Jun

Fix available

MINI-26xh-hjcx-5g9h

MinimOS/kserve-localmodel
MinimOS/kserve-localmodelnode-agent
MinimOS/kserve-manager

See record for full details 18 Jun

Fix available

CGA-m452-rpvh-7w4v

Chainguard/kserve-localmodelnode-agent-fips

See record for full details 12 Jun

Fix available
Severity - 7.7 (High)

CGA-mj65-gfmv-rxgp

Chainguard/kserve-manager
Wolfi/kserve-manager