CLEANSTART-2026-KK52429 Security fix for CVE-2025-1767 applied in: aws-efs-csi-driver 2.2.0-r1, calico-fips 3.31.2-r1, ip-masq-agent 2.12.6-r1, pulumi-kubernetes-operator 2.7.0-r0

CVE-2025-1767 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2023-2170 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver-fips, aws-efs-csi-driver...

GO-2023-2330 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GO-2022-0983 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, kubernetes, nodetaint, aws-efs-csi-driver, argocd-image-updater, argocd-image-updater-fips, aws-efs-csi-driver-fips, rancher-webhook, aws-ebs-csi-driver, kubeflow-pipelines, rancher-webhook-fips, spark-operator, ip-masq-agent,...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, argocd-image-updater-fips, aws-efs-csi-driver, argocd-image-updater...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, nodetaint, aws-efs-csi-driver, aws-efs-csi-driver-fips, aws-ebs-csi-driver, spark-operator, ip-masq-agent, prometheus-adapter...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, spark-operator, aws-efs-csi-driver, kubeflow-pipelines, kubernetes-csi-driver-hostpath, local-static-provisioner, argocd-image-updater, kubernetes-dns-node-cache, nodetaint, cri-tools, ip-masq-agent...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, aws-efs-csi-driver, kubeflow-pipelines, local-static-provisioner, argocd-image-updater, kubernetes-dns-node-cache, nodetaint, ip-masq-agent...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: spark-operator, aws-efs-csi-driver, kubernetes-dns-node-cache, nodetaint, ip-masq-agent, prometheus-adapter...

GO-2023-2170 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: manifest-tool, redpanda, cluster-autoscaler, terraform-docs, lazydocker, gatus, haproxy-ingress, kaniko, multus-cni, pulumi-language-java, glab, hubble, cluster-api, polaris, tekton-pipelines, temporal, kubeflow, jaeger-operator, crossplane-provider-aws-cloudformatio...

OPENSUSE-SU-2026:11492-1 aws-efs-utils-3.2.0-1.1 on GA media

These are all security issues fixed in the aws-efs-utils-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76418

These are all security issues fixed in the aws-efs-utils-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-6437

CVE-2026-6437 concerns the AWS EFS CSI Driver (aws-efs-csi-driver) prior to v3.0.1. The flaw is improper neutralization of argument delimiters in the volume handling component, which allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via...

CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: redpanda, yunikorn-k8shim, cluster-autoscaler, terraform-docs, cilium-cli, grpcurl, vault-secrets-webhook, cadvisor, kubernetes-dashboard, envoy-ratelimit, lazydocker, gatus, gitness, weaviate, kubernetes-csi-external-health-monitor, pulumi-language-java,...

GHSA-F9JG-8P32-2F55 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

openSUSE Security Advisory (SUSE-SU-2025:3954-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...