OSV - Open Source Vulnerabilities

CLEANSTART-2026-BB70412

CleanStart/percona-xtradb-cluster-operator-fips

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

3 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-AL68245

CleanStart/percona-xtradb-cluster-operator-fips

filippo

3 days ago

Fix available
Severity - 9.8 (Critical)

MINI-rv4r-j8f4-26gj

MinimOS/messaging-topology-operator-1.14
MinimOS/messaging-topology-operator-1.14-advanced-compat
MinimOS/messaging-topology-operator-1.14-compat

See record for full details

3 days ago

Fix available

MINI-f957-xg93-849m

MinimOS/messaging-topology-operator-1.15
MinimOS/messaging-topology-operator-1.15-advanced-compat
MinimOS/messaging-topology-operator-1.15-compat

See record for full details

3 days ago

No fix available

MINI-97wf-h5jv-jqwg

MinimOS/messaging-topology-operator-fips-1.15

See record for full details

3 days ago

No fix available

MINI-xv47-w2qp-8fwv

MinimOS/messaging-topology-operator-fips-1.16

See record for full details

3 days ago

No fix available

MINI-2562-hfh5-cg7h

MinimOS/messaging-topology-operator-fips-1.14

See record for full details

3 days ago

No fix available

MINI-v2jj-2rvv-pw54

MinimOS/messaging-topology-operator-1.16
MinimOS/messaging-topology-operator-1.16-advanced-compat
MinimOS/messaging-topology-operator-1.16-compat

See record for full details

3 days ago

No fix available

CLEANSTART-2026-IY92636

CleanStart/percona-xtradb-cluster-operator

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

16 Apr

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-BH97849

CleanStart/argo-cd

gRPC-Go is the Go language implementation of gRPC

16 Apr

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-JZ43336

CleanStart/percona-xtradb-cluster-operator

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

16 Apr

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-AN01004

CleanStart/percona-xtradb-cluster-operator-fips

filippo

16 Apr

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-KC83705

CleanStart/tempo

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

15 Apr

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-FB07695

CleanStart/velero-fips

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

15 Apr

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-JT73156

CleanStart/prometheus-node-exporter

protojson

11 Apr

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-OC72960

CleanStart/gpu-operator-fips

attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

10 Apr

Fix available
Severity - 9.8 (Critical)