CVE-2026-6437

CVE-2026-6437 concerns the AWS EFS CSI Driver (aws-efs-csi-driver) prior to v3.0.1. The flaw is improper neutralization of argument delimiters in the volume handling component, which allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via...

CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: goreleaser, grafana-agent-operator, kserve-rest-proxy, kubernetes-csi-driver-hostpath, knative-client, newrelic-infrastructure-agent, mc, rclone, helm-mapkubeapis, hubble-ui, tailscale, vault-benchmark, golangci-lint, k8ssandra-client, kubescape, spqr, gitaly,...

GHSA-F9JG-8P32-2F55 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

openSUSE Security Advisory (SUSE-SU-2025:3954-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2025:3954-1 Security update for aws-efs-utils

This update for aws-efs-utils fixes the following issues: Update to version 2.3.3 bsc1240044. Security issues fixed: - CVE-2025-55159: slab: incorrect bounds check in getdisjointmut function can lead to potential crash due to out-of-bounds access bsc1248055. - CVE-2020-35881: traitobject: log4rs:...

OPENSUSE-SU-2025:15461-1 aws-efs-utils-2.3.3-1.1 on GA media

These are all security issues fixed in the aws-efs-utils-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed...

aws-efs-utils-2.2.1-1.1 on GA media (moderate)

aws-efs-utils-2.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14951-1 Rating: moderate Cross-References: CVE-2020-35881 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2025:14951-1 aws-efs-utils-2.2.1-1.1 on GA media

These are all security issues fixed in the aws-efs-utils-2.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-9042 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, argocd-image-updater-fips, nodetaint, rancher-webhook, kubernetes-dns-node-cache-fips, local-static-provisioner, local-static-provisioner-fips, rancher-webhook-fips, ip-masq-agent, argocd-image-updater, aws-efs-csi-driver,...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater, aws-efs-csi-driver, aws-efs-csi-driver-fips...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater, aws-efs-csi-driver, aws-efs-csi-driver-fips...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

OPENSUSE-SU-2024:12639-1 aws-efs-utils-1.34.5-1.1 on GA media

These are all security issues fixed in the aws-efs-utils-1.34.5-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: cni-plugins, nodetaint, tkn-fips, falcoctl, k9s, rclone, git-lfs-fips, buildkitd, prometheus-node-exporter, istio-pilot-agent, protoc-gen-go-grpc, rabbitmq-default-user-credential-updater, stern, secrets-store-csi-driver, go-licenses, s5cmd, vt-cli, flyte,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: nodetaint, pulumi, falcoctl, crossplane-provider-aws-lambda, k9s, rclone, buildkitd, prometheus-node-exporter, protoc-gen-go-grpc, secrets-store-csi-driver, ipfs, spark-operator, hugo-extended, cfssl, kyverno-policy-reporter, crossplane-provider-aws-firehose,...

openSUSE: Security Advisory for aws (SUSE-SU-2023:0423-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...