CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, cri-tools, gitsign, nuclei, descheduler, kubernetes-csi-driver-hostpath, tailscale, cilium-cli, cloud-provider-vsphere, hubble-ui, cilium, kubernetes-csi-driver-nfs, go, kubernetes-csi-node-driver-registrar, mc, kubernetes-csi-external-attacher,...

GHSA-F9JG-8P32-2F55 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, aws-efs-csi-driver, kubeflow-pipelines, local-static-provisioner, nodetaint, local-static-provisioner-fips, rancher-webhook, kubernetes-dns-node-cache-fips, k8s-device-plugin, argocd-image-updater, kubernetes-dns-node-cache,...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, argocd-image-updater-fips, argocd-image-updater, aws-efs-csi-driver...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, argocd-image-updater-fips, argocd-image-updater, aws-efs-csi-driver...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, cilium-fips, gcsfuse, ko, kubernetes-dashboard-fips, ksops, flux-image-automation-controller, kpt, kubernetes-dashboard-metrics-scraper-fips, kubernetes-event-exporter, prometheus-beat-exporter, stern, gh, render-template,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, cilium-fips, gcsfuse, kubernetes-dashboard-fips, flux-image-automation-controller, kpt, kubernetes-dashboard-metrics-scraper-fips, kubernetes-event-exporter, prometheus-beat-exporter, gh, kyverno-policy-reporter-kyverno-plugin,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, spark-operator, ip-masq-agent, aws-efs-csi-driver, nodetaint, aws-ebs-csi-driver, kubernetes-dns-node-cache, cluster-autoscaler-fips, prometheus-adapter...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: nodetaint, ip-masq-agent, prometheus-adapter, spark-operator, aws-efs-csi-driver, kubernetes-dns-node-cache...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, spark-operator, ip-masq-agent, aws-efs-csi-driver, nodetaint, aws-ebs-csi-driver, kubernetes-dns-node-cache, cluster-autoscaler-fips, prometheus-adapter...

GHSA-Q78C-GWQW-JCMC vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...

GHSA-7FXM-F474-HF8W vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, aws-efs-csi-driver, kubeflow-pipelines, cluster-autoscaler-fips...

CVE-2023-3676 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, dgraph, kubescape, terraform-provider-sendgrid, src, aactl, k3d, scorecard, spark-operator, kubevela, up, slsa-verifier, cortex, buildkitd, kubeflow, prometheus-blackbox-exporter...