56 matches found
GO-2023-2170 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, aws-efs-csi-driver-fips...
GO-2023-2330 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GO-2022-0983 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GO-2024-3277 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, aws-efs-csi-driver-fips, argocd-image-updater-fips, argocd-image-updater...
GO-2024-2746 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, local-static-provisioner, argocd-image-updater-fips, argocd-image-updater, kubernetes, nodetaint, rancher-webhook, aws-efs-csi-driver-fips, ip-masq-agent, aws-ebs-csi-driver, kubernetes-dns-node-cache, rancher-webhook-fips,...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, nodetaint, ip-masq-agent, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, aws-ebs-csi-driver, prometheus-adapter, spark-operator...
GO-2024-2994 vulnerabilities
Vulnerabilities for packages: local-static-provisioner, kubeflow-pipelines, nodetaint, spark-operator, k8s-device-plugin, argocd-image-updater, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, aws-efs-csi-driver, ip-masq-agent, cri-tools...
GO-2024-3286 vulnerabilities
Vulnerabilities for packages: local-static-provisioner, kubeflow-pipelines, nodetaint, k8s-device-plugin, argocd-image-updater, kubernetes-dns-node-cache, aws-efs-csi-driver, ip-masq-agent...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: spark-operator, prometheus-adapter, kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, ip-masq-agent...
GO-2024-3277 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...
GO-2023-2170 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: slsa-verifier, nova, octo-sts, nri-prometheus, terragrunt, gostatsd, telegraf, guac, kube-logging-operator-custom-runner, act, spicedb-operator, sftpgo-plugin-pubsub, lazydocker, apisix-ingress-controller, cri-tools, jaeger-operator, rabbitmq-cluster-operator,...
OPENSUSE-SU-2026:11492-1 aws-efs-utils-3.2.0-1.1 on GA media
These are all security issues fixed in the aws-efs-utils-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-6437
CVE-2026-6437 concerns the AWS EFS CSI Driver (aws-efs-csi-driver) prior to v3.0.1. The flaw is improper neutralization of argument delimiters in the volume handling component, which allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via...
CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: slsa-verifier, dkron, sftpgo-plugin-eventsearch, mc, otel-cli, nerdctl, telegraf, memcached-exporter, helm-mapkubeapis, kserve-rest-proxy, sftpgo-plugin-pubsub, spicedb-operator, lazydocker, apisix-ingress-controller, cri-tools, terraform-provider-random,...
GHSA-F9JG-8P32-2F55 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
openSUSE Security Advisory (SUSE-SU-2025:3954-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2025:3954-1 Security update for aws-efs-utils
This update for aws-efs-utils fixes the following issues: Update to version 2.3.3 bsc1240044. Security issues fixed: - CVE-2025-55159: slab: incorrect bounds check in getdisjointmut function can lead to potential crash due to out-of-bounds access bsc1248055. - CVE-2020-35881: traitobject: log4rs:...