CVE-2026-84303 vulnerabilities

Vulnerabilities for packages: dapr, aws-otel-collector, external-secrets-operator, datadog-agent, gcp-compute-persistent-disk-csi-driver...

GHSA-QC2Q-P7WX-3PX3 vulnerabilities

Vulnerabilities for packages: dapr, aws-otel-collector, external-secrets-operator, datadog-agent, gcp-compute-persistent-disk-csi-driver...

CVE-2026-85781

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

CVE-2026-85781 Unverified access point ownership in Amazon EFS CSI Driver

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

CVE-2026-85781

The Amazon EFS CSI Driver (kubernetes-sigs/aws-efs-csi-driver) before v3.4.1 is vulnerable to unverified ownership of a storage access point in its volume deletion component. An authenticated Kubernetes user with PersistentVolume creation privileges can craft a PersistentVolume volumeHandle that ...

EUVD-2026-71692

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

CVE-2026-85781 Unverified access point ownership in Amazon EFS CSI Driver

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

PT-2026-86236

Name of the Vulnerable Software and Affected Versions Amazon EFS CSI Driver versions prior to v3.4.1 Description The volume deletion component fails to verify the ownership of a storage access point. This allows an authenticated Kubernetes user with PersistentVolume creation privileges to trigger...

CLEANSTART-2026-ZB55594 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r2

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r2 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-PP35477 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r1

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r1 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

GO-2026-6091 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, buildah, helm-set-status, step-issuer, timoni, runc, podinfo, azure-service-operator, k9s, src, kubernetes-csi-external-provisioner, vault-env, terraform-provider-google, seaweedfs, crossplane-provider-aws-ec2, kube-vip,...

CVE-2026-56858 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, buildah, helm-set-status, step-issuer, timoni, runc, podinfo, azure-service-operator, k9s, src, kubernetes-csi-external-provisioner, vault-env, terraform-provider-google, seaweedfs, crossplane-provider-aws-ec2, kube-vip,...

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, helm-set-status, step-issuer, timoni, runc, cilium-certgen, azure-service-operator, k9s, sbomqs, kubernetes-csi-external-provisioner, src, vault-env, jaeger-operator, seaweedfs, influx, crossplane-provider-aws-ec2, speedtest-go,...

CVE-2026-56859 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, helm-set-status, step-issuer, timoni, runc, cilium-certgen, azure-service-operator, k9s, sbomqs, kubernetes-csi-external-provisioner, src, vault-env, jaeger-operator, seaweedfs, influx, crossplane-provider-aws-ec2, speedtest-go,...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: vault-csi-provider, secrets-store-csi-driver...

GO-2023-2170 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, aws-efs-csi-driver-fips, kubeflow-pipelines...

GO-2023-2330 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GO-2022-0983 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, aws-efs-csi-driver-fips, argocd-image-updater-fips, argocd-image-updater...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: azurefile-csi-fips, eks-distro, harvester, harvester-fips, kubernetes-csi-driver-hostpath, longhorn-manager, longhorn-share-manager, rancher-system-agent, rke2-runtime-fips, azurefile-csi, longhorn-manager-fips, azuredisk-csi, cluster-autoscaler-fips,...