CLEANSTART-2026-GE09388 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 1.25.0-r5

Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VQ22894 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. See references for individual vulnerability details...

CLEANSTART-2026-SL86558 Security fixes for CVE-2024-7598, CVE-2026-32934, CVE-2026-32936, CVE-2026-33190, CVE-2026-33489, CVE-2026-33811, CVE-2026-33814, CVE-2026-35579, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-2wpx-qpw2-g5h5, ghsa-63cw-r7xf-jmwr, ghsa-h8mm-c463-wjq3, ghsa-qhmp-q7xh-99rh, ghsa-vp29-5652-4fw9 applied in versions: 1.26.8-r0, 1.26.8-r1

Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AY21238 security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion

Security vulnerability affects the kubernetes-dns-node-cache package. A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion...

CLEANSTART-2026-GQ31133 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-527x-5wrf-22m2, ghsa-9h8m-3fm2-qjrq, ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-p77j-4mvh-x3m3 applied in versions: 1.26.7-r0, 1.26.7-r1, 1.26.7-r2

Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: dkron, q, kyverno-policy-reporter-ui, caddy, k8sgateway, kubo, spegel, traefik, ipfs-cluster, kargo, teleport, kubernetes-dns-node-cache, frp, k3s...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: kubo, eks-distro, eks-distro-fips, dkron-fips, k3s, kyverno-policy-reporter-ui, frp, caddy-fips, ipfs-cluster, q, kubo-fips, caddy, spegel-fips, syncthing, spegel, kubernetes-dns-node-cache, traefik-fips, syncthing-fips, dkron, k8sgateway, coredns-fips,...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: traefik, eks-distro, caddy, eks-distro-fips, k3s, spegel, cloudflared, kubernetes-dns-node-cache, q, frp, traefik-fips, caddy-fips, kubernetes-dns-node-cache-fips, buf...

GHSA-27WF-5967-98GX vulnerabilities

Vulnerabilities for packages: local-static-provisioner, nodetaint, k8s-device-plugin, argocd-image-updater, ip-masq-agent, kubernetes-dns-node-cache, kubeflow-pipelines, aws-efs-csi-driver...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, rancher-webhook, aws-efs-csi-driver, argocd-image-updater, nodetaint, kubernetes-dns-node-cache, argocd-image-updater-fips, local-static-provisioner-fips, rancher-webhook-fips, aws-efs-csi-driver-fips, k8s-device-plugin,...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, nodetaint, k8s-device-plugin, argocd-image-updater, ip-masq-agent, kubernetes-dns-node-cache, kubeflow-pipelines, aws-efs-csi-driver...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, nodetaint, spark-operator, argocd-image-updater, kubernetes, ip-masq-agent, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, kubeflow-pipelines, aws-efs-csi-driver...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, nodetaint, spark-operator, argocd-image-updater, kubernetes, ip-masq-agent, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, kubeflow-pipelines, aws-efs-csi-driver...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: prometheus-operator, pulumi-language-yaml, crossplane, timoni, temporal-ui-server, kubernetes-event-exporter, aws-efs-csi-driver, cosign, rqlite, secrets-store-csi-driver-provider-aws, caddy, guac, spark-operator, velero, crossplane-provider-aws-elasticache, mc, sops...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, mc-fips, minio-fips, k3d, kubernetes-csi-external-resizer, crossplane, crossplane-provider-aws-iam, kubeflow, prometheus-alertmanager, kyverno-policy-reporter, rabbitmq-messaging-topology-operator, newrelic-infrastructure-agent, temporal,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, aws-efs-csi-driver, nodetaint, kubernetes-dns-node-cache, prometheus-adapter, spark-operator, aws-efs-csi-driver-fips, ip-masq-agent...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: nodetaint, spark-operator, ip-masq-agent, kubernetes-dns-node-cache, aws-efs-csi-driver, prometheus-adapter...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, aws-efs-csi-driver, nodetaint, kubernetes-dns-node-cache, prometheus-adapter, spark-operator, aws-efs-csi-driver-fips, ip-masq-agent...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: hugo, ollama, oauth2-proxy, k3d, kubeflow-fips, kaf, kubernetes-csi-external-resizer, kubeflow, prometheus-alertmanager, dgraph, pulumi, flux-notification-controller, prometheus-blackbox-exporter, newrelic-infrastructure-agent, kubernetes-dashboard-metrics-scraper,...