GO-2024-2994 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cri-tools, spark-operator, ip-masq-agent, kubeflow-pipelines, nodetaint, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, aws-efs-csi-driver, local-static-provisioner, argocd-image-updater...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: spark-operator, ip-masq-agent, prometheus-adapter, nodetaint, kubernetes-dns-node-cache, aws-efs-csi-driver...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, ip-masq-agent, kubeflow-pipelines, nodetaint, kubernetes-dns-node-cache, aws-efs-csi-driver, local-static-provisioner, argocd-image-updater...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

GO-2023-2170 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, argo-rollouts, yunikorn-k8shim, spark-operator, kubernetes, ip-masq-agent, emissary, rancher-webhook, vcluster, nodetaint, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, aws-efs-csi-driver, local-static-provisioner, kapp,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: timestamp-authority, fulcio, opentelemetry-collector-contrib, boring-registry, grafana-agent-operator, falcoctl, airflow, argo-events, buildkitd, up, trivy, harbor-registry, restic, velero, step, rekor, bank-vaults, rclone, step-ca, rook, zarf, thanos, tekton-chains,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: opa-envoy, gitlab-runner, crossplane-provider-azure-storage, docker-cli-buildx, azure-workload-identity-webhook, nri-prometheus, vault-benchmark, crossplane-provider-aws-sns, argo-events, lazydocker, harbor, kubevela, ingress-nginx-controller,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: karma, vault-benchmark, secrets-store-csi-driver-provider-gcp, argo-events, buildkitd, lazydocker, harbor, kubevela, buildah, thanos, cilium, aws-flb-cloudwatch, hubble, k3s, tekton-chains, aws-flb-kinesis, flyte, argo-cd, prometheus-operator, argo-workflows, conftes...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: karma, nri-prometheus, vault-benchmark, secrets-store-csi-driver-provider-gcp, argo-events, buildkitd, configmap-reload, lazydocker, harbor, pdfcpu, kubevela, buildah, nri-postgresql, thanos, cilium, aws-flb-cloudwatch, hubble, k3s, manifest-tool, aws-flb-kinesis,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gitlab-runner, aws-signer-notation-plugin, azure-workload-identity-webhook, timescaledb-parallel-copy, vault-benchmark, crossplane-provider-aws-sns, external-dns, fluxcd-kustomize-mutating-webhook, clickhouse-operator, nri-f5, kubernetes-dns-node-cache,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: fulcio, cloud-provider-gcp-cloud-controller-manager, docker-cli-buildx, gobump, argo-events, buildkitd, lazydocker, aws-application-networking-k8s, clickhouse-operator, kubernetes-csi-driver-hostpath, mongo-tools, nri-f5, pluto, portieris, nginx-prometheus-exporter,...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CVE-2026-68209

A flaw was found in the Linux kernel's sun4i-csi media driver. When the startstreaming function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service DoS condition on the affected...

Linux Distros Unpatched Vulnerability : CVE-2026-68209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If...

CLEANSTART-2026-CK40364 Security fixes in kubernetes-csi-driver-nfs-fips 4.13.0-r3

Package kubernetes-csi-driver-nfs-fips version 4.13.0-r3 fixes 19 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-29181, CVE-2026-39820, CVE-2026-39821, CVE-2026-42504...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: mariadb-operator, step-issuer, aws-privateca-issuer, cert-manager-csi-driver, cert-manager-istio-csr, cert-manager-webhook-pdns, cert-manager-cmctl, percona-server-mongodb-operator, kuberay-operator...

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-system-agent...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

CLEANSTART-2026-OH47925 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...