GO-2026-6603 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, aws-iam-authenticator-fips, vertical-pod-autoscaler-fips, longhorn-cli, packer-fips, zitadel, kube-mgmt, grafana-clickhouse-datasource, tfsec, crossplane-provider-aws-lakeformation-fips, dynatrace-operator-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, aws-iam-authenticator-fips, vertical-pod-autoscaler-fips, longhorn-cli, packer-fips, zitadel, kube-mgmt, grafana-clickhouse-datasource, tfsec, crossplane-provider-aws-lakeformation-fips, dynatrace-operator-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, aws-iam-authenticator-fips, vertical-pod-autoscaler-fips, longhorn-cli, packer-fips, zitadel, kube-mgmt, grafana-clickhouse-datasource, tfsec, crossplane-provider-aws-lakeformation-fips, dynatrace-operator-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, aws-iam-authenticator-fips, vertical-pod-autoscaler-fips, longhorn-cli, packer-fips, zitadel, kube-mgmt, grafana-clickhouse-datasource, tfsec, crossplane-provider-aws-lakeformation-fips, dynatrace-operator-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, aws-iam-authenticator-fips, vertical-pod-autoscaler-fips, longhorn-cli, packer-fips, zitadel, kube-mgmt, grafana-clickhouse-datasource, tfsec, crossplane-provider-aws-lakeformation-fips, dynatrace-operator-fips,...

CVE-2026-63691

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-63691

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-63691

Dell Container Storage Modules versions prior to 1.18.0 are impacted by a Missing Authorization vulnerability within the Dell CSI Driver for PowerMax - csireverseproxy component. An unauthenticated attacker with adjacent network access could exploit this flaw to gain unauthorized access . Impacti...

PT-2026-106772

Name of the Vulnerable Software and Affected Versions Dell Container Storage Modules versions prior to 1.18.0 Description A missing authorization issue exists in the Dell CSI Driver for PowerMax within the csireverseproxy component. An unauthenticated attacker with adjacent network access could...

CVE-2026-63691: Missing Authorization

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-103505

A flaw was found in the AWS Elastic File System EFS Container Storage Interface CSI Driver. A remote authenticated user with permissions to create persistent storage volumes can supply crafted comma-separated values within volume configuration attributes. This improper input handling allows the...

CVE-2026-103505

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

EUVD-2026-90883

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-103505 AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-103505 AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-103505

The AWS EFS CSI Driver (aws-efs-csi-driver ) versions v3.1.0 through v3.4.2 are vulnerable to an improper neutralization of argument delimiters within the volume handling component. This flaw could allow remote authenticated users who possess PersistentVolume creation permissions to inject arbitr...

CVE-2026-103505 AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-103505: Improper Neutralization of Argument Delimiters in a Command

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

PT-2026-103904

Name of the Vulnerable Software and Affected Versions AWS EFS CSI Driver aws-efs-csi-driver versions 3.1.0 through 3.4.2 Description Improper neutralization of argument delimiters in the volume handling component allows remote authenticated users with PersistentVolume creation permissions to inje...

CLEANSTART-2026-BY91929 Security fix for ghsa-hrxh-6v49-42gf applied in: loki 3.7.1-r2, secrets-store-csi-driver-provider-aws 3.1.4-r1

ghsa-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...