Vulnerability Database

CLEANSTART-2026-YO86996

CleanStart/cadvisor

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection 2 hours ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-RC17482

CleanStart/minio-operator

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 23 hours ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-EC45528

CleanStart/apache-nifi

Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5 23 hours ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-VO98287

CleanStart/vault

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-TY53144

CleanStart/vault

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-YS01797

CleanStart/calico

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-HR50080

CleanStart/cert-manager

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-QV22657

CleanStart/helm

Previously, resolving relative paths containing parent directory (' yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-WZ31386

CleanStart/ingress-nginx-controller

Previously, resolving relative paths containing parent directory (' yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-WT32301

CleanStart/kyverno

oras-go is a Go library for managing OCI artifacts yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-TP13569

CleanStart/opentelemetry-collector-contrib

gRPC-Go is the Go language implementation of gRPC yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-LA96365

CleanStart/sealed-secrets

Previously, a channel registered in the mux's chanList is not usable until it is established yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-DB46993

CleanStart/prometheus-operator

Prometheus is an open-source monitoring system and time series database yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-GQ91083

CleanStart/victoriametrics-operator-fips

Previously, a channel registered in the mux's chanList is not usable until it is established 3 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-MK94759

CleanStart/trust-manager

Previously, a channel registered in the mux's chanList is not usable until it is established 3 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-EG40747

CleanStart/step-issuer

Previously, a channel registered in the mux's chanList is not usable until it is established 3 days ago

Fix available
Severity - 9.8 (Critical)

Vulnerabilities