tigera-operator-1.28

Direct Vulnerabilities

Known vulnerabilities in the tigera-operator-1.28 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-78662	<1.28.15-r45
L CVE-2026-56855	<1.28.15-r45
L GHSA-gjhq-gjfw-99mq	<1.28.15-r43
L CVE-2026-56854	<1.28.15-r43
L GHSA-c974-w86c-vpfw	<1.28.15-r40
L GHSA-7qch-w8m5-g3h3	<1.28.15-r40
L GHSA-76p8-fhrm-vpc7	<1.28.15-r40
L CVE-2026-33818	<1.28.15-r40
L GHSA-xphw-4f88-5f39	<1.28.15-r40
L CVE-2026-56862	<1.28.15-r40
L CVE-2026-56859	<1.28.15-r40
L CVE-2026-39821	<1.28.15-r40
L GHSA-xc2p-8ggw-6cr5	<1.28.15-r40
L GHSA-w2q5-6q6x-x959	<1.28.15-r40
L CVE-2026-56860	<1.28.15-r40
L GHSA-25mv-j2qr-v5jq	<1.28.15-r40
L CVE-2026-56853	<1.28.15-r40
L CVE-2026-56858	<1.28.15-r40
L GHSA-jpjm-c3r5-q96r	<1.28.15-r39
L CVE-2026-56852	<1.28.15-r39
L GHSA-gg3m-vvp2-p2c5	<1.28.15-r38
L CVE-2026-46600	<1.28.15-r38
M Use of a Broken or Risky Cryptographic Algorithm	<1.28.15-r36
L GHSA-f5pg-7wfw-84q9	<1.28.15-r36
L GHSA-7f33-f4f5-xwgw	<1.28.15-r36
L Use of a Broken or Risky Cryptographic Algorithm	<1.28.15-r36
L GHSA-89gr-r52h-f8rx	<1.28.15-r34
L GHSA-vgwf-h737-ff37	<1.28.15-r34
L GHSA-qpw4-5x99-6vjp	<1.28.15-r34
L GHSA-w879-237q-wc7r	<1.28.15-r34
L GHSA-rm3j-f69w-wqmq	<1.28.15-r34
L GHSA-78mq-xcr3-xm33	<1.28.15-r34
L GHSA-q4h4-gmj2-qvw2	<1.28.15-r34
L GHSA-f5wc-c3c7-36mc	<1.28.15-r34
L GHSA-x527-x647-q7gg	<1.28.15-r34
L GHSA-9m57-25v3-79x9	<1.28.15-r34
L GHSA-45gg-vh54-h5m9	<1.28.15-r34
L GHSA-jppx-rxg9-jmrx	<1.28.15-r34
L GHSA-4279-q6mj-392r	<1.28.15-r35
L CVE-2026-42504	<1.28.15-r35
L GHSA-h524-452v-82p9	<1.28.15-r35
L CVE-2026-42507	<1.28.15-r35
L GHSA-h3gm-q7m7-mp28	<1.28.15-r35
L CVE-2026-27145	<1.28.15-r35
L Missing Authorization	<1.28.15-r34
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<1.28.15-r34
L Incorrect Type Conversion or Cast	<1.28.15-r34
L CVE-2026-46595	<1.28.15-r34
L Out-of-Bounds	<1.28.15-r34
L Missing Authorization	<1.28.15-r34
L Integer Overflow or Wraparound	<1.28.15-r34
L CVE-2026-46598	<1.28.15-r34
L Improper Verification of Cryptographic Signature	<1.28.15-r34
L Improper Certificate Validation	<1.28.15-r34
L Improper Certificate Validation	<1.28.15-r34
L Deserialization of Untrusted Data	<1.28.15-r34
L GHSA-5m4p-2gjx-p2g8	<1.28.15-r33
L CVE-2026-42499	<1.28.15-r33
L GHSA-2283-wf8c-rw8r	<1.28.15-r33
L GHSA-h74g-238j-357m	<1.28.15-r33
H Allocation of Resources Without Limits or Throttling	<1.28.15-r33
L GHSA-3v2c-x6q9-f697	<1.28.15-r33
L GHSA-497x-jcxf-m478	<1.28.15-r33
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.28.15-r33
H Double Free	<1.28.15-r33
L GHSA-qf3q-3h68-mmh2	<1.28.15-r33
L CVE-2026-39825	<1.28.15-r33
L Improper Encoding or Escaping of Output	<1.28.15-r33
L GHSA-qc64-m6c2-v4x7	<1.28.15-r33
L GHSA-xq5j-9r39-c3vf	<1.28.15-r33
H NULL Pointer Dereference	<1.28.15-r33
L Cross-site Scripting (XSS)	<1.28.15-r33
L CVE-2026-42501	<1.28.15-r33
L GHSA-p9h5-jm8x-mjm5	<1.28.15-r33
L GHSA-8g2r-hhvj-mv99	<1.28.15-r33
M Link Following	<1.28.15-r33
M Out-of-bounds Write	<1.28.15-r33
L GHSA-jrg3-gfjw-hm96	<1.28.15-r34
L CVE-2026-32280	<1.28.15-r34
M Link Following	<1.28.15-r34
L GHSA-m4pr-4j3g-9v7v	<1.28.15-r34
M Cross-site Scripting (XSS)	<1.28.15-r34
M Allocation of Resources Without Limits or Throttling	<1.28.15-r34
H Improper Certificate Validation	<1.28.15-r34
L GHSA-5w89-2c2x-6x66	<1.28.15-r34
L GHSA-gjvh-7jh8-7xhm	<1.28.15-r34
L GHSA-7mr4-xjxg-34g6	<1.28.15-r34
L GHSA-x4jj-h2v8-hqqv	<1.28.15-r34
H Allocation of Resources Without Limits or Throttling	<1.28.15-r34
H Incorrect Authorization	<1.28.15-r34
L GHSA-xj38-jxc5-rppx	<1.28.15-r34
L GHSA-j4j7-vw47-rhfq	<1.28.15-r31
L Cross-site Scripting (XSS)	<1.28.15-r31
L Direct Request ('Forced Browsing')	<1.28.15-r31
L Directory Traversal	<1.28.15-r31
L GHSA-rv83-g57w-fr8j	<1.28.15-r31
L GHSA-j3gx-2473-5fp8	<1.28.15-r31
L CVE-2025-61732	<1.28.15-r30
L GHSA-h355-32pf-p2xm	<1.28.15-r30
L GHSA-8jvr-vh7g-f8gx	<1.28.15-r30
C CVE-2025-68121	<1.28.15-r30
L GHSA-cm6p-qc7v-m3jw	<1.28.15-r29
L GHSA-xvqr-69v8-f3gv	<1.28.15-r29
L CVE-2025-61730	<1.28.15-r29
L CVE-2025-61731	<1.28.15-r29
L GHSA-g9q4-qjx4-2v7q	<1.28.15-r29
L Allocation of Resources Without Limits or Throttling	<1.28.15-r29
L Out-of-bounds Write	<1.28.15-r29
L GHSA-gm9r-q53w-2gh4	<1.28.15-r29
L Allocation of Resources Without Limits or Throttling	<1.28.15-r29
L GHSA-gr56-3gp6-6gmj	<1.28.15-r29
L GHSA-hcg3-q754-cr77	<1.28.15-r17
L GHSA-6v2p-p543-phr9	<1.28.15-r18
L Improper Certificate Validation	<1.28.15-r28
L GHSA-7c64-f9jr-v9h2	<1.28.15-r28
L GHSA-5mh9-3jwc-rp59	<1.28.15-r28
L Improper Certificate Validation	<1.28.15-r28
L GHSA-j5w8-q4qc-rx2x	<1.28.15-r27
L CVE-2025-47914	<1.28.15-r27
L CVE-2025-58181	<1.28.15-r27
L GHSA-f6x5-jh6r-wrfv	<1.28.15-r27
L Improper Certificate Validation	<1.28.15-r26
L CVE-2025-47912	<1.28.15-r26
L CVE-2025-61725	<1.28.15-r26
L Allocation of Resources Without Limits or Throttling	<1.28.15-r26
L Allocation of Resources Without Limits or Throttling	<1.28.15-r26
L Allocation of Resources Without Limits or Throttling	<1.28.15-r26
L Information Exposure Through Log Files	<1.28.15-r26
L CVE-2025-58183	<1.28.15-r26
L Algorithmic Complexity	<1.28.15-r26
L CVE-2025-58186	<1.28.15-r26
L Race Condition	<1.28.15-r24
L GHSA-j5pm-7495-qmr3	<1.28.15-r24
L CVE-2025-22874	<1.28.15-r22
L GHSA-6f52-wpx2-hvf2	<1.28.15-r22
L GHSA-62jj-gr2r-5c34	<1.28.15-r22
L CVE-2025-4673	<1.28.15-r22
L CVE-2025-22872	<1.28.15-r21
L CVE-2025-22871	<1.28.15-r20
M Open Redirect	<1.28.15-r19
L CVE-2025-22870	<1.28.15-r19
L CVE-2025-22868	<1.28.15-r18
L CVE-2025-22869	<1.28.15-r17
L CVE-2025-22866	<1.28.15-r16
L CVE-2024-45336	<1.28.15-r14
L CVE-2024-45341	<1.28.15-r14
L CVE-2024-45338	<1.28.15-r13
L CVE-2024-45337	<1.28.15-r12
L CVE-2024-34155	<1.28.15-r11
L CVE-2024-34156	<1.28.15-r11
L CVE-2024-34158	<1.28.15-r11
L CVE-2024-24791	<1.28.15-r10
C CVE-2024-24790	<1.28.15-r9
M CVE-2024-24789	<1.28.15-r9
L CVE-2024-24788	<1.28.15-r8
L CVE-2024-24787	<1.28.15-r8
L CVE-2023-45288	<1.28.15-r6
L CVE-2024-24786	<1.28.15-r5
L CVE-2023-45290	<1.28.15-r4
L CVE-2024-24785	<1.28.15-r4
L CVE-2024-24783	<1.28.15-r4
L CVE-2023-45289	<1.28.15-r4
L CVE-2024-24784	<1.28.15-r4
M Improper Validation of Integrity Check Value	<1.28.15-r3
H CVE-2023-45285	<1.28.15-r2
M CVE-2023-39326	<1.28.15-r2

Vulnerability

Vulnerable Version

<1.28.15-r45

<1.28.15-r45

<1.28.15-r43

<1.28.15-r43

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r40

<1.28.15-r39

<1.28.15-r39

<1.28.15-r38

<1.28.15-r38

Use of a Broken or Risky Cryptographic Algorithm

<1.28.15-r36

GHSA-f5pg-7wfw-84q9

<1.28.15-r36

GHSA-7f33-f4f5-xwgw

<1.28.15-r36

Use of a Broken or Risky Cryptographic Algorithm

<1.28.15-r36

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r35

<1.28.15-r35

<1.28.15-r35

<1.28.15-r35

<1.28.15-r35

<1.28.15-r35

Missing Authorization

<1.28.15-r34

Improper Enforcement of Message Integrity During Transmission in a Communication Channel

<1.28.15-r34

Incorrect Type Conversion or Cast

<1.28.15-r34

CVE-2026-46595

<1.28.15-r34

Out-of-Bounds

<1.28.15-r34

Missing Authorization

<1.28.15-r34

Integer Overflow or Wraparound

<1.28.15-r34

CVE-2026-46598

<1.28.15-r34

Improper Verification of Cryptographic Signature

<1.28.15-r34

Improper Certificate Validation

<1.28.15-r34

Improper Certificate Validation

<1.28.15-r34

Deserialization of Untrusted Data

<1.28.15-r34

<1.28.15-r33

<1.28.15-r33

<1.28.15-r33

<1.28.15-r33

Allocation of Resources Without Limits or Throttling

<1.28.15-r33

GHSA-3v2c-x6q9-f697

<1.28.15-r33

GHSA-497x-jcxf-m478

<1.28.15-r33

Loop with Unreachable Exit Condition ('Infinite Loop')

<1.28.15-r33

Double Free

<1.28.15-r33

GHSA-qf3q-3h68-mmh2

<1.28.15-r33

CVE-2026-39825

<1.28.15-r33

Improper Encoding or Escaping of Output

<1.28.15-r33

GHSA-qc64-m6c2-v4x7

<1.28.15-r33

GHSA-xq5j-9r39-c3vf

<1.28.15-r33

NULL Pointer Dereference

<1.28.15-r33

Cross-site Scripting (XSS)

<1.28.15-r33

<1.28.15-r33

<1.28.15-r33

<1.28.15-r33

<1.28.15-r33

<1.28.15-r33

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

Cross-site Scripting (XSS)

<1.28.15-r34

Allocation of Resources Without Limits or Throttling

<1.28.15-r34

Improper Certificate Validation

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

<1.28.15-r34

Allocation of Resources Without Limits or Throttling

<1.28.15-r34

Incorrect Authorization

<1.28.15-r34

GHSA-xj38-jxc5-rppx

<1.28.15-r34

GHSA-j4j7-vw47-rhfq

<1.28.15-r31

Cross-site Scripting (XSS)

<1.28.15-r31

Direct Request ('Forced Browsing')

<1.28.15-r31

<1.28.15-r31

<1.28.15-r31

<1.28.15-r31

<1.28.15-r30

<1.28.15-r30

<1.28.15-r30

<1.28.15-r30

<1.28.15-r29

<1.28.15-r29

<1.28.15-r29

<1.28.15-r29

<1.28.15-r29

Allocation of Resources Without Limits or Throttling

<1.28.15-r29

Out-of-bounds Write

<1.28.15-r29

GHSA-gm9r-q53w-2gh4

<1.28.15-r29

Allocation of Resources Without Limits or Throttling

<1.28.15-r29

GHSA-gr56-3gp6-6gmj

<1.28.15-r29

GHSA-hcg3-q754-cr77

<1.28.15-r17

GHSA-6v2p-p543-phr9

<1.28.15-r18

Improper Certificate Validation

<1.28.15-r28

GHSA-7c64-f9jr-v9h2

<1.28.15-r28

GHSA-5mh9-3jwc-rp59

<1.28.15-r28

Improper Certificate Validation

<1.28.15-r28

<1.28.15-r27

<1.28.15-r27

<1.28.15-r27

<1.28.15-r27

Improper Certificate Validation

<1.28.15-r26

CVE-2025-47912

<1.28.15-r26

CVE-2025-61725

<1.28.15-r26

Allocation of Resources Without Limits or Throttling

<1.28.15-r26

Allocation of Resources Without Limits or Throttling

<1.28.15-r26

Allocation of Resources Without Limits or Throttling

<1.28.15-r26

Information Exposure Through Log Files

<1.28.15-r26

CVE-2025-58183

<1.28.15-r26

Algorithmic Complexity

<1.28.15-r26

<1.28.15-r26

<1.28.15-r24

<1.28.15-r24

<1.28.15-r22

<1.28.15-r22

<1.28.15-r22

<1.28.15-r22

<1.28.15-r21

<1.28.15-r20

<1.28.15-r19

<1.28.15-r19

<1.28.15-r18

<1.28.15-r17

<1.28.15-r16

<1.28.15-r14

<1.28.15-r14

<1.28.15-r13

<1.28.15-r12

<1.28.15-r11

<1.28.15-r11

<1.28.15-r11

<1.28.15-r10

<1.28.15-r9

<1.28.15-r9

<1.28.15-r8

<1.28.15-r8

<1.28.15-r6

<1.28.15-r5

<1.28.15-r4

<1.28.15-r4

<1.28.15-r4

<1.28.15-r4

<1.28.15-r4

Improper Validation of Integrity Check Value

<1.28.15-r3

CVE-2023-45285

<1.28.15-r2

CVE-2023-39326

<1.28.15-r2