GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: terraform, crossplane-provider-aws-iam, infinispan-operator, mongo-tools, crossplane-provider-azure-sql, podinfo, crossplane-provider-aws-cloudwatchlogs, syft, k8sgpt, undock, slsa-verifier, nats, grafana-mimir, aws-load-balancer-controller, kbld, grype,...

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

CLEANSTART-2026-UC73978 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-mh2q-q3fh-2475 applied in versions: 2.17.0-r0, 2.17.0-r1, 2.17.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WS85269 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 6.1.0-r0, 6.1.0-r1, 6.1.0-r2, 6.1.0-r3, 6.1.0-r4

Multiple security vulnerabilities affect the kubernetes-csi-external-provisioner-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VO11205 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2, 8.4.0-r3, 8.4.0-r4

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CS02869 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, ghsa-p77j-4mvh-x3m3 applied in versions: 2.18.0-r0, 2.18.0-r1, 2.18.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OH47925 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

RHCOS 3 : OpenShift Container Platform 3.11 openshift-external-storage (RHSA-2019:4054)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4054 advisory. - kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation CVE-2019-11255...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver, cadvisor, sftpgo, terraform, hubble-ui, amazon-cloudwatch-agent-operator, cilium-envoy, external-dns, aws-flb-kinesis, kubernetes-dashboard-auth, crossplane-provider-azure-sql, cluster-autoscaler, vault-secrets-webhook, yunikorn-k8shim, syft...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: gitleaks, sftpgo, terraform, hubble-ui, external-dns, infinispan-operator, mongo-tools, crossplane-provider-azure-sql, syft, docker-credential-ecr-login, configmap-reload, slsa-verifier, nats, grafana-mimir, argo-cd, falco-exporter, aws-load-balancer-controller, kbld...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kube-vip, istio-fips, opencost-fips, cilium-certgen, chisel-fips, nerdctl-fips, kind, gotrue-fips, aws-privateca-issuer-fips, crossplane-provider-aws-ecr-fips, envoy-gateway, grafana-beyla, prometheus-beat-exporter-fips, hcloud, gitlab-pages-fips, kine,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver, cadvisor, sftpgo, harbor-cli, crossplane-provider-aws-iam, fluent-operator, aws-otel-collector, kuberay-operator, cluster-api-gcp-controller, external-dns, podinfo, crossplane-provider-azure-sql, grafana-alloy, cluster-autoscaler,...

CLEANSTART-2026-LC01167 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WM95952 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver, cadvisor, sftpgo, crossplane-provider-aws-iam, amazon-cloudwatch-agent-operator, cilium-envoy, cluster-api-gcp-controller, external-dns, aws-flb-kinesis, kubernetes-dashboard-auth, rook, podinfo, cluster-autoscaler, yunikorn-k8shim,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: gitleaks, sftpgo, langfuse, crossplane-provider-aws-iam, external-dns, mongo-tools, podinfo, crossplane-provider-aws-cloudwatchlogs, syft, k8sgpt, undock, configmap-reload, nats, rabbitmq-cluster-operator, argo-cd, aws-load-balancer-controller, yq,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver, cadvisor, sftpgo, crossplane-provider-aws-iam, amazon-cloudwatch-agent-operator, cilium-envoy, cluster-api-gcp-controller, external-dns, aws-flb-kinesis, kubernetes-dashboard-auth, rook, podinfo, cluster-autoscaler, yunikorn-k8shim,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: gitleaks, sftpgo, langfuse, crossplane-provider-aws-iam, external-dns, mongo-tools, podinfo, crossplane-provider-aws-cloudwatchlogs, syft, k8sgpt, undock, configmap-reload, nats, rabbitmq-cluster-operator, argo-cd, aws-load-balancer-controller, yq,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: azcopy-fips, istio-fips, opencost-fips, tflint, tflint-fips, k6-fips, gitlab-pages-fips, newrelic-fluent-bit-output-fips, minio-object-browser-fips, coredns, google-guest-agent, crossplane-provider-aws-sqs-fips, sftpgo-plugin-pubsub, kubernetes-csi-driver-hostpath,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: azcopy-fips, istio-fips, opencost-fips, tflint, tflint-fips, k6-fips, grafana-beyla, envoy-gateway, kine, kaniko, coredns, google-guest-agent, sftpgo-plugin-pubsub, zot, cert-manager-webhook-pdns, otel-cli, docker-compose-fips, minio-fips, opentofu-fips,...