GO-2026-6603 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips, longhorn-share-manager,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: commercial-spilo-fips, aws-flb-kinesis-fips, crossplane-provider-aws-athena, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, krakend-fips,...

CLEANSTART-2026-LC49486 Security fix for GHSA-j5w8-q4qc-rx2x applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1, cloud-provider-aws 1.34.1-r1

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AR39396 Security fix for GHSA-f6x5-jh6r-wrfv applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV50859 Security fix for GHSA-p77j-4mvh-x3m3 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OX52172 Security fix for GHSA-mh2q-q3fh-2475 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QL10579 Security fix for GHSA-hfvc-g4fc-pqhx applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EY57242 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CVE-2026-63691

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-63691

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-63691

Dell Container Storage Modules, versions prior to 1.18.0 , are susceptible to a Missing Authorization vulnerability within the Dell CSI Driver for PowerMax in the csireverseproxy component. An unauthenticated attacker with adjacent network access could exploit this flaw to gain Unauthorized acces...

CVE-2026-63691: Missing Authorization

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...

PT-2026-106772

Name of the Vulnerable Software and Affected Versions Dell Container Storage Modules versions prior to 1.18.0 Description A missing authorization issue exists in the Dell CSI Driver for PowerMax within the csireverseproxy component. An unauthenticated attacker with adjacent network access could...

CVE-2026-103505

A flaw was found in the AWS Elastic File System EFS Container Storage Interface CSI Driver. A remote authenticated user with permissions to create persistent storage volumes can supply crafted comma-separated values within volume configuration attributes. This improper input handling allows the...

CVE-2026-103505

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

EUVD-2026-90883

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-103505 AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...