GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubewatch, nfs-subdir-external-provisioner, metacontroller, nova, envoy-ratelimit, dkron, flux-helm-controller, oras, dataplaneapi, mountpoint-s3-csi-driver, volume-modifier-for-k8s, flux, tailscale, victoriametrics-cluster,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, atlantis, kubeflow-katib, promxy, redka, runc, gcsfuse, buildah, bom, cilium-cli, terraform-provider-time, flux, tailscale, volume-modifier-for-k8s, argo-rollouts, terraform-provider-pagerduty, crossplane-provider-azure-authorization...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, redka, ctop, buildah, cilium-cli, vertical-pod-autoscaler, volume-modifier-for-k8s, kubernetes-dashboard, prometheus-adapter, vale, timescaledb-parallel-copy, kapp, github-mcp-server, dask-gateway, crossplane, dfc,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: nova, flux-source-watcher, flux-image-automation-controller-fips, external-secrets-operator, cilium-certgen-fips, victoriametrics-fips, tailscale, dapr-fips, karpenter-fips, github-mcp-server, apko, kubewatch, flux-source-watcher-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: envoy-gateway, prometheus-elasticsearch-exporter, aws-flb-cloudwatch-fips, kpt, kyverno, gitlab-workhorse-ce-fips, amazon-ssm-agent, karpenter-fips, gitleaks, gosu, kubevirt-cdi-uploadserver, kubernetes, traefik-fips, kubernetes-csi-node-driver-registrar, gomplate,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: envoy-gateway, crossplane-provider-aws-sns-fips, kubernetes-event-exporter-fips, step-kms-plugin, prometheus-elasticsearch-exporter, chaos-mesh, plugin-barman-cloud, aws-flb-cloudwatch-fips, cue-fips, apache-beam-python-3.12-sdk, kpt, kyverno, kiali-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: envoy-gateway, prometheus-elasticsearch-exporter, aws-flb-cloudwatch-fips, kpt, kyverno, gitlab-workhorse-ce-fips, amazon-ssm-agent, karpenter-fips, gitleaks, gosu, kubevirt-cdi-uploadserver, kubernetes, traefik-fips, kubernetes-csi-node-driver-registrar, gomplate,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: envoy-gateway, controller-gen, crossplane-provider-aws-sns-fips, cluster-api-ipam-provider-in-cluster, kubernetes-event-exporter-fips, step-kms-plugin, prometheus-elasticsearch-exporter, chaos-mesh, plugin-barman-cloud, aws-flb-cloudwatch-fips, cue-fips, kubectx, kpt...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, gcsfuse, kaniko, melange, gomplate, flux, tailscale, kubernetes-csi-external-snapshotter, argo-rollouts, terragrunt, openfga, temporal-server, crossplane-provider-azure-authorization, splunk-otel-collector, aws-node-termination-handle...

CLEANSTART-2026-LC01167 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WM95952 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: envoy-gateway, livekit-server, step-kms-plugin, chainloop-cli-fips, kserve, google-osconfig-agent, kyverno, kiali-fips, gitlab-workhorse-ce-fips, skopeo-fips, amazon-ssm-agent, agentbeat-fips, traefik-fips, zarf-fips, bank-vaults, frankenphp-8.4, step-issuer-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: envoy-gateway, livekit-server, step-kms-plugin, chainloop-cli-fips, kserve, google-osconfig-agent, kyverno, kiali-fips, gitlab-workhorse-ce-fips, skopeo-fips, amazon-ssm-agent, agentbeat-fips, traefik-fips, zarf-fips, bank-vaults, frankenphp-8.4, step-issuer-fips,...

CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZR49276 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.18.0-r0

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FR61696 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 2.17.0-r0

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-57128

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-3864 CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server

A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identifiers containing path traversal sequenc...

CVE-2026-3864: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identifiers containing path traversal sequenc...

CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server

CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H — Medium 6.5 A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI...