189 matches found
GO-2023-1793 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver...
GO-2025-3547 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-system-agent...
GO-2025-3774 vulnerabilities
Vulnerabilities for packages: mesosphere-vsphere-csi, vcluster, rancher-fleet, yunikorn-k8shim, emissary, kubernetes-csi-driver-hostpath, cloud-provider-gcp-cloud-controller-manager, docker-machine-driver-harvester, rancher-system-agent...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, kube-rbac-proxy, sigstore-scaffolding, terragrunt, k3d, opa, cert-manager-cmctl, ferretdb, kaniko, kubernetes-csi-driver-hostpath, guac, step-ca, smarter-device-manager, kubernetes-csi-external-provisioner, zot, dagger, minio, rqlite,...
GO-2024-2994 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, argocd-image-updater, cri-tools, spark-operator, local-static-provisioner, kubeflow-pipelines, k8s-device-plugin, nodetaint, kubernetes-csi-driver-hostpath, ip-masq-agent, aws-efs-csi-driver...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, spark-operator, nodetaint, ip-masq-agent, prometheus-adapter, aws-efs-csi-driver...
GO-2024-3286 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, argocd-image-updater, aws-efs-csi-driver, local-static-provisioner, k8s-device-plugin, nodetaint, ip-masq-agent, kubeflow-pipelines...
GO-2023-2170 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...
GO-2024-3277 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...
GO-2025-3465 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, kubernetes-csi-driver-nfs, argocd-image-updater, argo-rollouts, kubernetes, spark-operator, vcluster, local-static-provisioner, rancher-fleet, yunikorn-k8shim, emissary, rancher-webhook, nodetaint, kapp, kubernetes-csi-driver-hostpath,...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, flux-image-reflector-controller, sigstore-scaffolding, tekton-chains, terragrunt, prometheus-operator, pulumi, flux-kustomize-controller, up, chezmoi, argo-workflows, guac, step-ca, tkn, velero, zot, boring-registry,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: karpenter, kiali, crossplane-provider-family-aws, terraform-docs, rancher-helm, atlantis, apisix-ingress-controller, cert-manager-webhook-pdns, crossplane-provider-azure-storage, rancher-webhook, src-fingerprint, guac, amazon-cloudwatch-agent-operator,...
GO-2026-4982 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, contour, karpenter, rancher-helm, prometheus-operator, atlantis, gatekeeper, rancher-webhook, k8s-device-plugin, guac, argo-workflows, amazon-cloudwatch-agent-operator, kube-fluentd-operator, grafana, tkn, buildah, goreleaser, nerdctl, argo-cd,...
GO-2026-4978 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, contour, karpenter, crane, rancher-helm, k3d, prometheus-operator, atlantis, gatekeeper, pgtimetable, k8s-device-plugin, guac, argo-workflows, amazon-cloudwatch-agent-operator, kube-fluentd-operator, grafana, rancher-webhook, tkn, buildah, helm-docs...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: headlamp, crossplane-provider-family-aws, clickhouse-operator, lazygit, rancher-helm, k3d, gatekeeper, pgtimetable, src-fingerprint, guac, kine, amazon-cloudwatch-agent-operator, dkron, extism, crossplane-provider-aws-elasticache, boring-registry, podinfo,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: headlamp, clickhouse-operator, k3d, prometheus-operator, guac, amazon-cloudwatch-agent-operator, gcsfuse, tkn, argo-events, terraform-provider-azapi, oauth2-proxy, azure-service-operator, rancher-system-agent, nri-nginx, k8sgateway, docker-credential-gcr, docker-cli,...
CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1
Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...
CVE-2026-68209
A flaw was found in the Linux kernel's sun4i-csi media driver. When the startstreaming function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service DoS condition on the affected...
Linux Distros Unpatched Vulnerability : CVE-2026-68209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If...