A maintenance patch release with a correctness fix for CRD handling under HookOnlyStrategy and a set of dependency updates. It does not document operator setup changes.
Source ↗
Don't read release notes for 77 CNCF projects.
Alerts only when your stack needs action, and what to do about it.
77 projects · 1091 analyses · this week 31 reviewed → 9 alerts
Latest alert · Oct 8, 2026 – Oct 15, 2026
Last 7 days
Action needed9 projects · 58details →
containerdv2.3.7 · v2.2.10 · v2.4.2 · v2.0.14security12breaking11CVE-2026-95839 and GHSA-vwhp-8p66-mq4f 외 22건
Vitessv24.0.5 · v23.0.8security9breaking3Global SET variable-name injection fix, GHSA-m282-7w35-g77m 외 11건
Envoyv1.40.0 · v1.38.7 · v1.37.9 · v1.36.13security4breaking3wasmtime update for CVE-2026-54786 외 6건
Check if affected9 projects · 78details →
- Vitessv24.0.5 · v23.0.8security18breaking6Restricted MySQL connection character sets 외 23건
Keycloak26.8.1security21CVE-2026-15943 identity provider client-secret reuse 외 20건
Volcanov1.16.0security1breaking8DRA capacity aggregation fix, GHSA-j38h-7pfq-cxmw 외 8건
Plan ahead1 projects · 1details →
A maintenance release with operator-visible changes to connection security, device handling, configuration, and monitoring. It also includes cleanup and a dependency update.
Action needed (1)
breakingPriority class for the detect version job
The core component now sets a priority class for the detect version job. This job configuration change ships in the core component.
Check if affected (4)
breakingSecure
msgr2mode for monitor connectionsApplies if you use
ceph.breakingRejection of purely numeric topology values
Applicability is not stated in the release notes.
breakingSkipping
nbd,drbd, andzramdevices during discoveryApplies if you use
nbd,drbd, orzramdevices.- + 1 more on the release page
A maintenance release that improves OSD reconciliation and credential handling and expands accepted Ceph lifecycle notification values. It contains no disclosed security advisory.
Source ↗
A substantial feature and maintenance release adds scanning, reporting, MCP, and remediation capabilities. It also includes correctness fixes, dependency updates, and performance improvements.
Source ↗