35 matches found
CLEANSTART-2026-KK52429 Security fix for CVE-2025-1767 applied in: aws-efs-csi-driver 2.2.0-r1, calico-fips 3.31.2-r1, ip-masq-agent 2.12.6-r1, pulumi-kubernetes-operator 2.7.0-r0
CVE-2025-1767 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
GO-2023-2170 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips, aws-efs-csi-driver, kubeflow-pipelines...
GO-2023-2330 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GO-2022-0983 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GO-2024-3277 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips, aws-efs-csi-driver, aws-efs-csi-driver-fips...
GO-2024-2746 vulnerabilities
Vulnerabilities for packages: nodetaint, aws-ebs-csi-driver, ip-masq-agent, aws-efs-csi-driver-fips, spark-operator, argocd-image-updater, argocd-image-updater-fips, local-static-provisioner, rancher-webhook, kubernetes, kubernetes-csi-driver-hostpath, kubeflow-pipelines, rancher-webhook-fips,...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: nodetaint, aws-ebs-csi-driver, ip-masq-agent, aws-efs-csi-driver-fips, spark-operator, prometheus-adapter, kubernetes-dns-node-cache, aws-efs-csi-driver...
GO-2024-2994 vulnerabilities
Vulnerabilities for packages: k8s-device-plugin, kubeflow-pipelines, kubernetes-dns-node-cache, local-static-provisioner, nodetaint, ip-masq-agent, kubernetes-csi-driver-hostpath, spark-operator, aws-efs-csi-driver, cri-tools, argocd-image-updater...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: nodetaint, kubernetes-dns-node-cache, ip-masq-agent, spark-operator, aws-efs-csi-driver, prometheus-adapter...
GO-2024-3286 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, k8s-device-plugin, kubernetes-dns-node-cache, local-static-provisioner, nodetaint, ip-masq-agent, aws-efs-csi-driver, argocd-image-updater...
GO-2023-2170 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...
GO-2024-3277 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: conjur-cli, vault-benchmark, hubble-ui, jitsucom-bulker, telegraf, cert-manager-webhook-pdns, opa, authservice, trino, aws-efs-csi-driver, croc, dynamic-localpv-provisioner, flux-kustomize-controller, gitlab-pages, temporal-ui-server, litefs, victoriametrics-cluster,...
CVE-2026-6437: Improper Neutralization of Argument Delimiters in a Command
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: juicefs-csi-driver, filebrowser, hubble-ui, vault-benchmark, knative-operator, jitsucom-bulker, telegraf, argo-workflows, secrets-store-csi-driver-provider-aws, terraform-provider-pagerduty, go-discover, vexctl, authservice, falco-exporter, aws-efs-csi-driver, kaf,...
GHSA-VV39-3W5Q-974Q vulnerabilities
Vulnerabilities for packages: rancher-webhook-fips, rancher-agent...
CVE-2024-10220 vulnerabilities
Vulnerabilities for packages: nodetaint, ip-masq-agent, aws-efs-csi-driver-fips, local-static-provisioner-fips, k8s-device-plugin, argocd-image-updater, argocd-image-updater-fips, local-static-provisioner, rancher-webhook, rancher-webhook-fips, kubeflow-pipelines, kubernetes-dns-node-cache-fips,...
GHSA-H7WQ-JJ8R-QM7P vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips, aws-efs-csi-driver, aws-efs-csi-driver-fips...