CVE-2026-39961
2 advisories.
Go/github.com/aiven/aiven-operator CVE-2026-39961: medium 6.8
Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource
Action: Upgrade github.com/aiven/aiven-operator to 0.37.0 or later.
go get github.com/aiven/aiven-operator@v0.37.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.31.0 | 0.37.0 | - |
Fixed versions
| 0.37.0 |
Sources
- osv: GHSA-99j8-wv67-4c72
- https://github.com/aiven/aiven-operator/security/advisories/GHSA-99j8-wv67-4c72
- https://nvd.nist.gov/vuln/detail/CVE-2026-39961
- https://github.com/aiven/aiven-operator/commit/032c9ba63257fdd2fddfb7f73f71830e371ff182
- https://github.com/aiven/aiven-operator
- https://github.com/aiven/aiven-operator/releases/tag/v0.37.0
CVE-2026-39961 · published · modified · JSON
Go/github.com/aiven/aiven-operator CVE-2026-39961: unknown
Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource in github.com/aiven/aiven-operator
Action: Upgrade github.com/aiven/aiven-operator to 0.37.0 or later.
go get github.com/aiven/aiven-operator@v0.37.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.31.0 | 0.37.0 | - |
Fixed versions
| 0.37.0 |
Sources
- osv: GO-2026-5283
- https://github.com/aiven/aiven-operator/security/advisories/GHSA-99j8-wv67-4c72
- https://nvd.nist.gov/vuln/detail/CVE-2026-39961
- https://github.com/aiven/aiven-operator/commit/032c9ba63257fdd2fddfb7f73f71830e371ff182
- https://github.com/aiven/aiven-operator/releases/tag/v0.37.0
CVE-2026-39961 · published · modified · JSON