CLEANSTART-2026-OX02272 Security fix for ghsa-259r-337f-4rfw applied in: dex-fips 2.42.1-r5, nfs-subdir-external-provisioner 4.0.2-r2, temporal-server 1.31.3-r2

ghsa-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DK20803 Security fix for ghsa-6wxm-mpqj-6jpf applied in: nfs-subdir-external-provisioner 4.0.2-r0

Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UP16119 Security fix for ghsa-cg3q-j54f-5p7p applied in: nfs-subdir-external-provisioner 4.0.2-r0

Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BZ31858 Security fix for ghsa-6v2p-p543-phr9 applied in: nfs-subdir-external-provisioner 4.0.2-r0

Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JX77218 Kubernetes kube-apiserver in versions v1

Security vulnerability affects the nfs-subdir-external-provisioner package. The Kubernetes kube-apiserver in versions v1...

CLEANSTART-2026-TF89729 security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node

Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node...

provisioner

Provisioner 概要 Provisioner は、シングルボードコンピュータ SBC、特に U-Boot ベースのプラットフォーム向けの、開発者にフォーカスしたプロビジョニング用サイドキックです。 自己完結型の環境を提供し、以下の操作を可能にします: ボードへのリモートアクセス ブリングアップワークフローの自動化 カーネルとルートファイルシステムのプロビジョニング フラッシュ操作の実行 ラボハードウェアの安全な共有 運用モデルは意図的にシンプルです: 1 ボード = 1 Provisioner インスタンス Provisioner...

CVE-2025-62878

CVE-2025-62878: Local Path Provisioner パストラバーサル 概要 項目| 値 ---|--- CVE ID| CVE-2025-62878 GHSA ID| GHSA-jr3w-9vfr-c746 深刻度| クリティカル CVSS 10.0 CWE| CWE-23 相対パストラバーサル 影響を受けるコンポーネント| rancher/local-path-provisioner 影響を受けるバージョン| v0.0.27 v0.0.32 修正バージョン| v0.0.33+ 脆弱性の説明 StorageClass の pathPattern...

ROS-20260922-73-0113

The vulnerability in golang-github-rancher-local-path-provisioner is related to errors in handling relative pathnames to the directory. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ROS-20260921-73-0108

The vulnerability in golang-github-rancher-local-path-provisioner is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to increase their privileges...

CLEANSTART-2025-JX95241 Security fix for ghsa-hp87-p4gw-j4gq applied in: nfs-subdir-external-provisioner-fips 4.0.17-r0, nfs-subdir-external-provisioner-fips 4.0.18-r1

ghsa-hp87-p4gw-j4gq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-KV52215 Security fix for ghsa-cg3q-j54f-5p7p applied in: multus-cni-fips 3.9.3-r2, nfs-subdir-external-provisioner-fips 4.0.16-r0, nfs-subdir-external-provisioner-fips 4.0.17-r0, nfs-subdir-external-provisioner-fips 4.0.18-r1

ghsa-cg3q-j54f-5p7p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RD73080 Security fix for ghsa-cgrx-mc8f-2prm applied in: eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, kaniko 1.24.0-r0, kaniko-fips 1.24.0-r0, local-static-provisioner 2.6.0-r1, local-static-provisioner-fips 2.6.0-r1, local-static-provisioner-fips 2.7.0-r1, prometheus-node-exporter 1.8.0-r3, prometheus-node-exporter-fips 1.10.2-r1, prometheus-node-exporter-fips 1.10.2-r3, prometheus-node-exporter-fips 1.7.0-r2, prometheus-node-exporter-fips 1.8.2-r2, prometheus-node-exporter-fips 1.9.1-r1, runc 1.1.14-r0, skaffold 2.16.1-r1, trivy-fips 0.67.2-r0, velero 1.17.0-r0

ghsa-cgrx-mc8f-2prm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-JF58630 Security fix for ghsa-8cfg-vx93-jvxw applied in: nfs-subdir-external-provisioner-fips 4.0.16-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-JT47341 Security fix for ghsa-33c5-9fx5-fvjm applied in: nfs-subdir-external-provisioner-fips 4.0.16-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-VV56547 Security fix for ghsa-mfv7-gq43-w965 applied in: nfs-subdir-external-provisioner-fips 4.0.16-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-YC51954 Security fix for ghsa-g42g-737j-qx6j applied in: nfs-subdir-external-provisioner-fips 4.0.16-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-QE77299 Security fix for ghsa-x6mj-w4jf-jmgw applied in: nfs-subdir-external-provisioner-fips 4.0.16-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-WT23235 Security fix for ghsa-wqv3-8cm6-h6wg applied in: nfs-subdir-external-provisioner-fips 4.0.16-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2025-UP04115 Security fix for ghsa-c3h9-896r-86jm applied in: nfs-subdir-external-provisioner-fips 4.0.16-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...