Vulnerability Database

CLEANSTART-2026-GQ91083

CleanStart/victoriametrics-operator-fips

Previously, a channel registered in the mux's chanList is not usable until it is established yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-MK94759

CleanStart/trust-manager

Previously, a channel registered in the mux's chanList is not usable until it is established yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-EG40747

CleanStart/step-issuer

Previously, a channel registered in the mux's chanList is not usable until it is established yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-QK25151

CleanStart/step-issuer

Previously, a channel registered in the mux's chanList is not usable until it is established yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-MM20617

CleanStart/sealed-secrets

Previously, a channel registered in the mux's chanList is not usable until it is established yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-RU97646

CleanStart/helm-operator

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2... yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-PE88816

CleanStart/helm-operator

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-LK25174

CleanStart/istio

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-RE39938

CleanStart/istio

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label yesterday

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-SH05010

CleanStart/opentelemetry-collector-contrib

malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log yesterday

Fix available
Severity - 9.8 (Critical)

RHSA-2026:61253

Red Hat:rhel_e4s:9.2::appstream/go-toolset
Red Hat:rhel_e4s:9.2::appstream/golang
Red Hat:rhel_e4s:9.2::appstream/golang-bin
Red Hat:rhel_e4s:9.2::appstream/golang-docs
Red Hat:rhel_e4s:9.2::appstream/golang-misc
... 3 more

Red Hat Security Advisory: golang security update 31 Aug

Fix available
Severity - 8.8 (High)

RHSA-2026:57649

Red Hat:rhel_e4s:9.4::appstream/go-toolset
Red Hat:rhel_e4s:9.4::appstream/golang
Red Hat:rhel_e4s:9.4::appstream/golang-bin
Red Hat:rhel_e4s:9.4::appstream/golang-docs
Red Hat:rhel_e4s:9.4::appstream/golang-misc
... 3 more

Red Hat Security Advisory: golang security update 26 Aug

Fix available
Severity - 8.8 (High)

RHSA-2026:49712

Red Hat:rhel_eus:9.6::appstream/go-toolset
Red Hat:rhel_eus:9.6::appstream/golang
Red Hat:rhel_eus:9.6::appstream/golang-bin
Red Hat:rhel_eus:9.6::appstream/golang-docs
Red Hat:rhel_eus:9.6::appstream/golang-misc
... 3 more

Red Hat Security Advisory: golang security update 26 Aug

Fix available
Severity - 8.8 (High)

RHSA-2026:49702

Red Hat:enterprise_linux_eus:10.0/go-toolset
Red Hat:enterprise_linux_eus:10.0/golang
Red Hat:enterprise_linux_eus:10.0/golang-bin
Red Hat:enterprise_linux_eus:10.0/golang-docs
Red Hat:enterprise_linux_eus:10.0/golang-misc
... 3 more

Red Hat Security Advisory: golang security update 26 Aug

Fix available
Severity - 8.8 (High)

CLEANSTART-2026-DD27612

CleanStart/k8ssandra-operator

Security fixes in k8ssandra-operator 1.26.0-r0 13 Aug

Fix available

CLEANSTART-2026-FB06164

CleanStart/crossplane-provider-keycloak-fips

Security fixes in crossplane-provider-keycloak-fips 2.22.1-r1 13 Aug

Fix available

Vulnerabilities