CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi, cloud-provider-gcp-cloud-controller-manager, rancher-fleet, rancher-system-agent, emissary, kubernetes-csi-driver-hostpath, docker-machine-driver-harvester, vcluster, yunikorn-k8shim...

GHSA-HJ2P-8WJ8-PFQ4 vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi, cloud-provider-gcp-cloud-controller-manager, rancher-fleet, rancher-system-agent, emissary, kubernetes-csi-driver-hostpath, docker-machine-driver-harvester, vcluster, yunikorn-k8shim...

CVE-2023-30840

Fluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applications. Starting in version 0.7.0 and prior to version 0.8.6, if a malicious user gains control of a Kubernetes node running fluid csi pod controlled by the csi-nodeplugin-fluid...

CVE-2022-31077

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message response from KubeEdge can crash the CSI Driver controller server by triggering a nil-pointer dereference panic. As a...

GHSA-3WQC-MWFX-672P vulnerabilities

Vulnerabilities for packages: blob-csi, knative-operator, k3s, wal-g...

GHSA-3WQC-MWFX-672P vulnerabilities

Vulnerabilities for packages: beats-fips, karpenter-fips, blob-csi-fips, eks-distro, blob-csi, gitlab-pages-fips, eks-distro-fips, grafana-fips, knative-operator, wal-g, k3s...

Vulnerability of the rkisp1_csi_disable() function in the drivers/media/platform/rockchip/rkisp1/rkisp1-csi.c module – This driver is responsible for supporting multimedia devices in the Linux operating system. An attacker can exploit this vulnerability to cause a service failure.

Vulnerability of the rkisp1csidisable function in the drivers/media/platform/rockchip/rkisp1/rkisp1-csi.c module – The Linux kernel’s multimedia device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to caus...

Security Bulletin: A vulnerability in IBM Spectrum Scale CSI could allow unauthorized access (CVE-2022-40607)

Summary A security vulnerability has been identified in IBM Spectrum Scale CSI that could allow unauthorized access. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-40607 DESCRIPTION: IBM Spectrum Scale could allow users with permissions to create pod, persistent...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, rancher-agent...

SUSE CVE-2024-1725

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane HCP. This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node...

GO-2025-3512 kubevirt-csi: PersistentVolume allows access to HCP's root node in github.com/kubevirt/csi-driver

kubevirt-csi: PersistentVolume allows access to HCP's root node in github.com/kubevirt/csi-driver. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: sonobuoy, hubble-fips, kapp-controller-fips, cluster-api-aws-controller, spire-controller-manager-fips, metrics-server-fips, kiali-fips, flux-image-automation-controller-fips, openfga, mkcert, dockerize-fips, prometheus-node-exporter, grafana,...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: wireguard-go, grafana-rollout-operator, kubescape, boring-registry, kube-vip, zot, k6, minify, sbomqs, thanos-operator, kserve-rest-proxy, nginx-prometheus-exporter, ip-masq-agent, git-lfs, metallb, wuzz, cloudnative-pg, delve, descheduler,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: wireguard-go, kubescape, boring-registry, kube-vip, minify, sbomqs, thanos-operator, octo-sts, ip-masq-agent, git-lfs, metallb, delve, docker, dive, newrelic-nri-statsd, hello-world-golang, libnvidia-container, cfssl, gitness, snyk-cli, nri-f5,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: ferretdb, task, terraform-docs, q, wireguard-go, memcached-exporter, prometheus-pushgateway, nri-prometheus, temporal-ui-server, nri-elasticsearch, argo-workflows, terraform, kubernetes-csi-external-provisioner, influx, kubeflow-katib, controller-gen, kubevela, kpt,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: wireguard-go, grafana-rollout-operator, boring-registry, kube-vip, k6, minify, sbomqs, thanos-operator, kserve-rest-proxy, octo-sts, nginx-prometheus-exporter, ip-masq-agent, git-lfs, metallb, wuzz, cloudnative-pg, sftpgo, delve, descheduler, dive, newrelic-nri-stats...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: ferretdb, task, terraform-docs, q, wireguard-go, memcached-exporter, prometheus-pushgateway, nri-prometheus, temporal-ui-server, nri-elasticsearch, argo-workflows, terraform, kubernetes-csi-external-provisioner, influx, kubeflow-katib, controller-gen, kubevela, kpt,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: sonobuoy, spark-operator, fuse-overlayfs-snapshotter, nri-f5, gitness, prometheus-redis-exporter-fips, go-bindata, metrics-server-fips, aws-load-balancer-controller, eksctl, dgraph, k3d, kwok, helm-push, azure-aad-pod-identity-mic, dockerize-fips,...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: sonobuoy, hubble-fips, kapp-controller-fips, spire-controller-manager-fips, go-bindata, metrics-server-fips, kiali-fips, flux-image-automation-controller-fips, openfga, mkcert, dockerize-fips, prometheus-node-exporter, grafana, kubernetes-ingress-defaultbackend-fips,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: nodetaint, argocd-image-updater, ip-masq-agent, kubernetes, rancher-fleet, aws-efs-csi-driver, emissary, argo-rollouts, kubernetes-csi-driver-hostpath, rancher-webhook, spark-operator, vcluster, kubernetes-csi-driver-nfs, local-static-provisioner, kapp,...