PT-2026-25942

Name of the Vulnerable Software and Affected Versions Kubernetes CSI Driver for NFS affected versions not specified Description A flaw exists in the Kubernetes CSI Driver for NFS related to insufficient validation of the subDir parameter within volume identifiers. An attacker capable of creating...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: trino, tkn, kots, spqr, kubernetes, mattermost, net-kourier, dkron, sriov-network-device-plugin, prometheus-alertmanager, terraform-provider-tls, kubernetes-dashboard-api, cloudprober, ingress-nginx-controller, kubernetes-csi-external-snapshotter, dask-gateway, gital...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, trino, kots, aws-s3-controller, cloudprober, ingress-nginx-controller, gitaly, kubernetes-csi-external-snapshotter, runc, kubernetes-replicator, sonobuoy, flux-notification-controller, aws-signer-notation-plugin,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, flux-source-controller, helm-exporter, cluster-api-gcp-controller, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, terraform-provider-time-fips, beats, terraform-provider-azurerm-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, helm-exporter, cluster-api-gcp-controller, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, git-sync, terraform-provider-time-fips, beats, terraform-provider-azurerm-fips,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, helm-exporter, cluster-api-gcp-controller, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, git-sync, terraform-provider-time-fips, beats, terraform-provider-azurerm-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, trino, kots, aws-s3-controller, cloudprober, ingress-nginx-controller, runc, sonobuoy, kubernetes-replicator, flux-notification-controller, aws-signer-notation-plugin, postgres-operator, wave, helm-mapkubeapis,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, trino, kots, aws-s3-controller, cloudprober, ingress-nginx-controller, gitaly, runc, sonobuoy, kubernetes-replicator, flux-notification-controller, aws-signer-notation-plugin, postgres-operator, wave, helm-mapkubeapis,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, k8sgpt-operator, gpu-operator, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, git-sync, terraform-provider-time-fips, beats, cluster-proportional-autoscaler-fips, caddy,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, k8sgpt-operator, gpu-operator, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, git-sync, terraform-provider-time-fips, beats, cluster-proportional-autoscaler-fips, caddy,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, step-issuer-fips, cert-manager-google-cas-issuer, cert-manager-cmctl-fips, aws-privateca-issuer-fips, mariadb-operator, step-issuer, cert-manager-webhook-pdns-fips, gitlab-operator-fips, cert-manager-openshift-routes,...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, cert-manager-webhook-pdns, opentelemetry-operator, mariadb-operator, step-issuer, percona-server-mongodb-operator, cert-manager-istio-csr, cert-manager-cmctl, aws-privateca-issuer...

CLEANSTART-2026-MY73913 Security fixes for GHSA-R6J8-C6R2-37RR applied in versions: 4.12.1-r0

Security vulnerability affects the kubernetes-csi-driver-nfs package. This issue is resolved in later releases. See references for vulnerability details...

EUVD-2024-1746

Malicious code in bioql PyPI...

EUVD-2023-1539

Malicious code in bioql PyPI...

EUVD-2022-0837

Malicious code in bioql PyPI...

EUVD-2022-6183

Malicious code in bioql PyPI...

EUVD-2022-2051

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: grafana-alloy, terraform, ipfs-cluster, kpt, nri-nginx, apm-server, caddy, kyverno-notation-aws, guac, harbor-registry, rabbitmq-messaging-topology-operator, kind, envconsul, witness, dgraph, docker-cli-buildx, pluto, src, falcoctl, bom, wire-go,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, nvidia-nsight-compute-12.9, kube-vip-cloud-provider, cloud-provider-aws-fips, linkerd2-proxy-init, blob-csi-fips, nvidia-nsight-compute-12.8, karma-fips, secrets-store-csi-driver-provider-aws-fips, mattmoor-chainit, pvc-autoresizer, karpenter-fips,...