GO-2024-3286 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, nodetaint, kubeflow-pipelines, local-static-provisioner, ip-masq-agent, k8s-device-plugin, argocd-image-updater, aws-efs-csi-driver...

GO-2023-2170 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: argo-rollouts, rancher-webhook, kubernetes-dns-node-cache, rancher-fleet, emissary, kubernetes-csi-driver-hostpath, kubernetes-csi-driver-nfs, local-static-provisioner, ip-masq-agent, nodetaint, spark-operator, vcluster, kubernetes, argocd-image-updater,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: cosign, flux-source-controller, py3-cassandra-medusa, chezmoi, bank-vaults, goreleaser, secrets-store-csi-driver-provider-azure, k8sgpt, restic, harbor-registry, guac, rook, rekor, opentelemetry-collector-contrib, policy-controller, zot, falcoctl, sops,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, runc, crossplane-provider-aws-elasticache, terraform-provider-acme, cluster-proportional-autoscaler, kyverno, cis-operator, continuity, kaniko, dask-gateway, kapp-controller, spark-operator, kube-vip, crossplane-provider-aws-memorydb, goreleaser,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: runc, terraform-provider-acme, kyverno, dask-gateway, gatekeeper, gitaly, goreleaser, k8ssandra-client, k8sgpt, apko, karpenter, gitlab-pages, nerdctl, lazydocker, cilium, opencost, skopeo, terraform-provider-tls, step-issuer, sftpgo-plugin-eventstore, argo-events,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: runc, terraform-provider-acme, cluster-proportional-autoscaler, kyverno, minify, http-echo, cni-plugins, dask-gateway, spark-operator, gatekeeper, cargobump, gitaly, goreleaser, k8sgpt, k8ssandra-client, ini-file, kubeflow, minio-operator, apko, karpenter, ratify,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cosign, runc, crossplane-provider-aws-elasticache, go-licenses, http-echo, kapp-controller, kubernetes-dns-node-cache, dask-gateway, rancher-loglevel, spark-operator, sftpgo-plugin-kms, gatekeeper, goreleaser, kubeflow, minio-operator, kserve-modelmesh-serving,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cis-operator, cni-plugins, kapp-controller, kubernetes-csi-driver-hostpath, spark-operator, wire-go, cluster-api-azure-controller, k8sgpt, kyverno-notation-aws, ini-file, rabbitmq-messaging-topology-operator, gptscript, ratify, kubernetes-dashboard-api, lazydocker,...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CVE-2026-68209

A flaw was found in the Linux kernel's sun4i-csi media driver. When the startstreaming function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service DoS condition on the affected...

Linux Distros Unpatched Vulnerability : CVE-2026-68209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If...

CLEANSTART-2026-CK40364 Security fixes in kubernetes-csi-driver-nfs-fips 4.13.0-r3

Package kubernetes-csi-driver-nfs-fips version 4.13.0-r3 fixes 19 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-29181, CVE-2026-39820, CVE-2026-39821, CVE-2026-42504...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, kuberay-operator, cert-manager-csi-driver, step-issuer, percona-server-mongodb-operator, cert-manager-webhook-pdns, aws-privateca-issuer, cert-manager-cmctl, mariadb-operator...

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-system-agent...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

CLEANSTART-2026-OH47925 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LA07853 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-33186, ghsa-mh2q-q3fh-2475 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.2-r0

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: runc, crossplane-provider-aws-elasticache, terraform-provider-acme, spark-operator, sftpgo-plugin-kms, kube-vip, gatekeeper, kubeflow, apko, kube-vip-cloud-provider, gitlab-pages, pdfcpu, terraform-provider-tls, controller-gen, kapp, rancher-fleet,...