Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
k8ssandra-operator-fips may expose hostname errors
published 9 months ago
Summary
The k8ssandra-operator-fips package contains several weaknesses that can cause problems when it processes host names. These issues could allow an attacker to disrupt services or gain information about your network. Apply the latest vendor patches or upgrade to a newer version as soon as possible.
What to do
- Update cleanstart k8ssandra-operator-fips to version 1.27.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | k8ssandra-operator-fips |
< 1.27.0-r0 Fix: upgrade to 1.27.0-r0
|
Original advisory text
Within HostnameError
Multiple security vulnerabilities affect the k8ssandra-operator-fips package. Within HostnameError. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-0913 URL
- https://osv.dev/vulnerability/CVE-2025-4673 URL
- https://osv.dev/vulnerability/CVE-2025-47907 URL
- https://osv.dev/vulnerability/CVE-2025-61727 URL
- https://osv.dev/vulnerability/CVE-2025-61729 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-0913 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-4673 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-47907 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61727 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61729 URL
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published30 Jan 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-NI96678 · OSV
Track software like this
Free during beta