39 matches found
CLEANSTART-2026-KK52429 Security fix for CVE-2025-1767 applied in: aws-efs-csi-driver 2.2.0-r1, calico-fips 3.31.2-r1, ip-masq-agent 2.12.6-r1, pulumi-kubernetes-operator 2.7.0-r0
CVE-2025-1767 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
GO-2023-2170 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, aws-efs-csi-driver-fips...
GO-2023-2330 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GO-2022-0983 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GO-2024-2746 vulnerabilities
Vulnerabilities for packages: local-static-provisioner, argocd-image-updater-fips, aws-ebs-csi-driver, ip-masq-agent, rancher-webhook-fips, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, nodetaint, spark-operator, argocd-image-updater, kubernetes-csi-driver-hostpath, kubeflow-pipelines,...
GO-2024-3277 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater-fips, argocd-image-updater, aws-efs-csi-driver-fips...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, ip-masq-agent, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, nodetaint, spark-operator, aws-ebs-csi-driver, prometheus-adapter...
GO-2024-2994 vulnerabilities
Vulnerabilities for packages: ip-masq-agent, kubernetes-csi-driver-hostpath, k8s-device-plugin, kubernetes-dns-node-cache, nodetaint, argocd-image-updater, aws-efs-csi-driver, spark-operator, local-static-provisioner, kubeflow-pipelines, cri-tools...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: ip-masq-agent, nodetaint, kubernetes-dns-node-cache, aws-efs-csi-driver, spark-operator, prometheus-adapter...
GO-2024-3286 vulnerabilities
Vulnerabilities for packages: ip-masq-agent, k8s-device-plugin, kubernetes-dns-node-cache, nodetaint, argocd-image-updater, aws-efs-csi-driver, local-static-provisioner, kubeflow-pipelines...
GO-2023-2170 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...
GO-2024-3277 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: podinfo, rancher-fleet, rancher-webhook, trino, cluster-autoscaler, tigera-operator, buildah, metrics-server, pulumi-kubernetes-operator, runc, opa-envoy, nri-apache, kubernetes-csi-livenessprobe, flux-kustomize-controller, containerd, nri-consul,...
CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...
CVE-2026-6437: Improper Neutralization of Argument Delimiters in a Command
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: rancher-fleet, cluster-autoscaler, nginx-prometheus-exporter, buildah, go-discover, cert-manager-cmctl, runc, opa-envoy, terraform-provider-pagerduty, kubernetes-csi-livenessprobe, terraform-provider-random, external-dns, secrets-store-csi-driver, docker-cli, keda,...
GHSA-F9JG-8P32-2F55 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver-fips...
GHSA-VV39-3W5Q-974Q vulnerabilities
Vulnerabilities for packages: rancher-webhook-fips, rancher-agent...
CVE-2024-10220 vulnerabilities
Vulnerabilities for packages: local-static-provisioner, rancher-webhook, argocd-image-updater-fips, local-static-provisioner-fips, ip-masq-agent, rancher-webhook-fips, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, nodetaint, argocd-image-updater, kubeflow-pipelines, aws-efs-csi-driver,...