193 matches found
CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0
Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-3864 CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server
A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identifiers containing path traversal sequenc...
CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server
CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H — Medium 6.5 A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI...
PT-2026-25942
Name of the Vulnerable Software and Affected Versions Kubernetes CSI Driver for NFS affected versions not specified Description A flaw exists in the Kubernetes CSI Driver for NFS related to insufficient validation of the subDir parameter within volume identifiers. An attacker capable of creating...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit, newrelic-infrastructure-agent, crossplane-provider-aws-route53, litestream, kubo, kube-rbac-proxy, tofu-controller, sftpgo-plugin-pubsub, external-dns, prometheus-operator, thanos, lvm-driver, ksops, k8ssandra-operator, pulumi-language-yaml,...
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-route53, yace, thanos, zarf, aws-s3-controller, flux-source-controller, ytt, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, gitlab-kas, logstash-exporter, azure-ipam, terraform-provider-random,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, crossplane-function-auto-ready-fips, opentelemetry-collector-contrib-fips, vault-csi-provider-fips, gcp-compute-persistent-disk-csi-driver, opentofu-fips, grafana, amazon-ecs-agent-fips, helm-diff, kube-state-metrics,...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, crossplane-function-auto-ready-fips, opentelemetry-collector-contrib-fips, vault-csi-provider-fips, gcp-compute-persistent-disk-csi-driver, portieris-fips, opentofu-fips, grafana, amazon-ecs-agent-fips, helm-diff,...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, crossplane-function-auto-ready-fips, opentelemetry-collector-contrib-fips, vault-csi-provider-fips, gcp-compute-persistent-disk-csi-driver, portieris-fips, opentofu-fips, grafana, amazon-ecs-agent-fips, helm-diff,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-route53, yace, thanos, osv-scanner, flux-kustomize-controller, aws-s3-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, gitlab-kas, logstash-exporter, aws-flb-cloudwatch,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-route53, yace, thanos, osv-scanner, flux-kustomize-controller, aws-s3-controller, scorecard, timescaledb-tune, flux-source-controller, ytt, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, gops, gitlab-kas, logstash-exporter...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, crossplane-function-auto-ready-fips, opentelemetry-collector-contrib-fips, rancher-support-bundle-kit, vault-csi-provider-fips, gcp-compute-persistent-disk-csi-driver, docker-credential-gcr, opentofu-fips, grafana,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, crossplane-function-auto-ready-fips, opentelemetry-collector-contrib-fips, rancher-support-bundle-kit, vault-csi-provider-fips, gcp-compute-persistent-disk-csi-driver, docker-credential-gcr, opentofu-fips, grafana,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: cert-manager-webhook-pdns, mariadb-operator-fips, cert-manager-google-cas-issuer-fips, cert-manager-openshift-routes, percona-xtradb-cluster-operator-fips, aws-privateca-issuer, cert-manager-cmctl-fips, cert-manager-openshift-routes-fips, opentelemetry-operator-fips,...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, step-issuer, aws-privateca-issuer, percona-server-mongodb-operator, cert-manager-webhook-pdns, cert-manager-istio-csr, mariadb-operator, opentelemetry-operator, cert-manager-cmctl...
CLEANSTART-2026-MY73913 Security fixes for GHSA-R6J8-C6R2-37RR applied in versions: 4.12.1-r0
Security vulnerability affects the kubernetes-csi-driver-nfs package. This issue is resolved in later releases. See references for vulnerability details...
EUVD-2024-1746
Malicious code in bioql PyPI...
EUVD-2022-0837
Malicious code in bioql PyPI...