CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CVE-2026-68209

A flaw was found in the Linux kernel's sun4i-csi media driver. When the startstreaming function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service DoS condition on the affected...

Linux Distros Unpatched Vulnerability : CVE-2026-68209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If...

CLEANSTART-2026-TH78371 Security fixes in secrets-store-csi-driver-fips 1.5.4-r0

Package secrets-store-csi-driver-fips version 1.5.4-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-CK40364 Security fixes in kubernetes-csi-driver-nfs-fips 4.13.0-r3

Package kubernetes-csi-driver-nfs-fips version 4.13.0-r3 fixes 19 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-29181, CVE-2026-39820, CVE-2026-39821, CVE-2026-42504...

CLEANSTART-2026-RV44305 Security fixes in kubernetes-csi-driver-nfs 4.12.1-r0

Package kubernetes-csi-driver-nfs version 4.12.1-r0 fixes 1 vulnerabilities: ghsa-r6j8-c6r2-37rr...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, step-issuer, kuberay-operator, aws-privateca-issuer, percona-server-mongodb-operator, cert-manager-webhook-pdns, cert-manager-istio-csr, mariadb-operator, cert-manager-cmctl...

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-system-agent...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

CLEANSTART-2026-OH47925 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LA07853 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-33186, ghsa-mh2q-q3fh-2475 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.2-r0

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-route53, thanos, zarf, flux-kustomize-controller, aws-s3-controller, scorecard, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, gitlab-kas, aws-flb-cloudwatch,...

EUVD-2026-23500

Amazon EFS CSI Driver has mount option injection via unsanitized volumeHandle and mounttargetip fields...

CVE-2026-6437

CVE-2026-6437 concerns the AWS EFS CSI Driver (aws-efs-csi-driver) prior to v3.0.1. The flaw is improper neutralization of argument delimiters in the volume handling component, which allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via...

Amazon EFS CSI Driver 安全漏洞

The Amazon EFS CSI Driver is an open-source component developed by the Kubernetes SIGs, used for mounting AWS File Storage in Kubernetes clusters. Previous versions of the Amazon EFS CSI Driver, such as 3.0.1, contained security vulnerabilities. These vulnerabilities stemmed from improper paramet...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dbmate, local-path-provisioner, victoriametrics-cluster, external-secrets-operator, grafana-rollout-operator, apko, karpenter, flux-notification-controller, dkron, newrelic-infra-operator, tailscale, victoriametrics, osv-scanner, pluto, actions-runner-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, yace, vendir, chisel, osv-scanner, aws-s3-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, gitlab-kas, lazygit, aws-flb-cloudwatch,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: vault-benchmark, newrelic-infrastructure-agent, litestream, tofu-controller, sftpgo-plugin-pubsub, apko, docker-machine-driver-harvester, go-discover, external-dns, kube-vip, falco-exporter, lvm-driver, crossplane-provider-azure-managedidentity, prometheus-operator,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, crossplane-function-auto-ready-fips, rancher-support-bundle-kit, gcp-compute-persistent-disk-csi-driver, docker-credential-gcr, opentofu-fips, grafana, amazon-ecs-agent-fips, kube-state-metrics, aws-ebs-csi-driver,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, crossplane-function-auto-ready-fips, rancher-support-bundle-kit, gcp-compute-persistent-disk-csi-driver, docker-credential-gcr, opentofu-fips, grafana, portieris-fips, amazon-ecs-agent-fips, vertical-pod-autoscaler,...