CLEANSTART-2026-FW89965 Security fixes in kubernetes-csi-external-resizer 2.0.0-r0

Package kubernetes-csi-external-resizer version 2.0.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, incert, nerdctl, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, sops, dagdotdev, aws-otel-collector, crossplane-provider-aws-kms, cerbos, zarf, kube-rbac-proxy, cloudprober, chisel, chartmuseum, neuvector-dbgen,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, kargo, nerdctl, grafana-operator, hugo-extended, docker, kine, pulumi-language-java, newrelic-infrastructure-agent, flux-image-reflector-controller, pulumi, kor, kubeflow-pipelines, volume-modifier-for-k8s, src,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: buildkitd, kubevela, docker-compose, k3s, cri-tools, envoy-ratelimit, kubernetes, kubescape, temporal-server, kine, temporal, kubernetes-csi-external-resizer, metrics-server, volume-modifier-for-k8s...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falcoctl-fips, src, kubevela, prometheus-blackbox-exporter, bank-vaults-fips, up, kubernetes-csi-livenessprobe-fips, kiam, vault-csi-provider, buildkitd, kubeflow, timestamp-authority-fips, scorecard, prometheus-adapter-fips, metrics-server-fips, dgraph, kubescape,...

GHSA-F4W6-3RH6-6Q4Q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...