EUVD-2026-23500

Amazon EFS CSI Driver has mount option injection via unsanitized volumeHandle and mounttargetip fields...

CVE-2026-6437

CVE-2026-6437 concerns the AWS EFS CSI Driver (aws-efs-csi-driver) prior to v3.0.1. The flaw is improper neutralization of argument delimiters in the volume handling component, which allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via...

CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

Amazon EFS CSI Driver 安全漏洞

The Amazon EFS CSI Driver is an open-source component developed by the Kubernetes SIGs, used for mounting AWS File Storage in Kubernetes clusters. Previous versions of the Amazon EFS CSI Driver, such as 3.0.1, contained security vulnerabilities. These vulnerabilities stemmed from improper paramet...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: hubble, metacontroller, aws-load-balancer-controller, goreleaser, omnibump, sftpgo-plugin-eventsearch, nodetaint, secrets-store-csi-driver-provider-aws, aws-network-policy-agent, flux-helm-controller, osv-scanner, supercronic, dataplaneapi, gh, pluto, karpenter,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cue, local-static-provisioner, haproxy-ingress, goreleaser, vault-k8s, k8sgpt-operator, spicedb-operator, mongodb-kubernetes-operator, kaf, sbom-convert, nri-redis, rancher-fleet, amass, timoni, db-operator, vale, rancher-agent, gcsfuse, yunikorn-k8shim,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: hubble, cue, migrate, kubernetes-csi-driver-nfs, mattermost, verticadb-operator, boring-registry, goreleaser, wave, k8sgpt-operator, flux-helm-controller, k8ssandra-client, gh, spicedb-operator, prometheus, coredns, docker-credential-gcr, step-issuer, aws-flb-firehos...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, envoy-ratelimit, flux-source-watcher, actions-runner-controller, omnibump, victorialogs-fips, goreleaser, victoriametrics, actions-runner-controller-fips, pluto, k8s-metacollector, fluxcd-kustomize-mutating-webhook,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: falco-no-driver, coredns-fips, slsa-verifier, etcd, buildkite-agent-fips, jaeger-fips, openbao, knative-serving-fips, grafana-operator, terraform-fips, cluster-autoscaler, policy-controller, chezmoi, newrelic-fluent-bit-output-fips, rancher-machine, conftest-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: falco-no-driver, coredns-fips, slsa-verifier, etcd, buildkite-agent-fips, jaeger-fips, openbao, knative-serving-fips, grafana-operator, terraform-fips, cluster-autoscaler, policy-controller, chezmoi, newrelic-fluent-bit-output-fips, rancher-machine, conftest-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: verticadb-operator-fips, cert-manager-csi-driver, cadvisor, falco-no-driver, knative-kafka-broker, temporal-ui-server, kubescape-operator-fips, coredns-fips, cadence, crossplane-function-auto-ready-fips, flannel-fips, slsa-verifier, tailscale, etcd,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: controller-gen, docker-credential-acr-env-fips, cert-manager-csi-driver, nri-redis-fips, nri-consul-fips, verticadb-operator-fips, cadvisor, falco-no-driver, consul-k8s, knative-kafka-broker, knative-storage-migrate-fips, kubescape-operator-fips,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: hubble, migrate, verticadb-operator, wolfictl, boring-registry, goreleaser, haproxy-ingress, octo-sts, grafana-alloy, juicefs, gcp-compute-persistent-disk-csi-driver, cloudflared, spicedb-operator, prometheus, percona-server-mongodb-operator,...

CLEANSTART-2026-LC01167 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WM95952 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: azcopy-fips, falco-no-driver, consul-k8s, knative-kafka-broker, ratify-fips, kubescape-operator-fips, restic-fips, temporal-ui-server, octo-sts, dagger, fulcio, slsa-verifier, openbao, gcsfuse, spicedb-fips, bank-vaults-fips, policy-controller, tekton-chains,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: azcopy-fips, falco-no-driver, consul-k8s, knative-kafka-broker, ratify-fips, kubescape-operator-fips, restic-fips, temporal-ui-server, octo-sts, dagger, fulcio, slsa-verifier, openbao, gcsfuse, spicedb-fips, bank-vaults-fips, policy-controller, tekton-chains,...

CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZR49276 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.18.0-r0

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FR61696 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 2.17.0-r0

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...