GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, helm-operator, kubescape, crossplane, rke2-cloud-provider, metallb, cluster-api-helm-controller, zot, kyverno-notation-aws, gatekeeper, kube-state-metrics, kubescape-operator, rancher-system-agent, cluster-api-gcp-controller, openbao, yunikorn-k8shim,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: temporal-server, nri-nagios, runc, docker-credential-ecr-login, oras, temporal, dockerize, nri-redis, kine, helm-operator, php-fpmexporter, trillian, cadvisor, prometheus-adapter, wait-for-port, caddy, nri-prometheus, kubernetes-dns-node-cache, controller-gen,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: loki, kine, velero-plugin-for-csi, cadvisor, wal-g, caddy, crossplane-provider-family-azure, terraform-provider-tls, redis-operator, rke2-cloud-provider, cloud-sql-proxy, zot, docker-compose, kubescape-operator, argo-events, mountpoint-s3-csi-driver,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: oras, nri-redis, kine, php-fpmexporter, rancher-webhook, cadvisor, wal-g, caddy, crossplane-provider-family-azure, infinispan-operator, terraform-provider-tls, sonobuoy, http-echo, victoriametrics, redis-operator, cloud-sql-proxy, zot, git-sync, kubescape-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, nri-redis, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flanne...

CLEANSTART-2026-LB37339 Security fixes in kubernetes-csi-external-resizer-fips 2.2.1-r1

Package kubernetes-csi-external-resizer-fips version 2.2.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-FW89965 Security fixes in kubernetes-csi-external-resizer 2.0.0-r0

Package kubernetes-csi-external-resizer version 2.0.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

CLEANSTART-2026-TB71092 Security fixes in kubernetes-csi-external-resizer-fips 2.1.0-r1

Package kubernetes-csi-external-resizer-fips version 2.1.0-r1 fixes 48 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: loki, oras, nri-redis, kine, rancher-webhook, cadvisor, caddy, infinispan-operator, terraform-provider-tls, sonobuoy, http-echo, victoriametrics, redis-operator, rke2-cloud-provider, cloud-sql-proxy, docker-compose, kubescape-operator, argo-events,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: temporal-server, pgpool2exporter, restic, runc, conftest, temporal, timestamp-authority, kine, helm-operator, php-fpmexporter, trillian, cadvisor, prometheus-adapter, crossplane-provider-aws-lambda, flannel, caddy, crossplane-provider-family-azure,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: temporal-server, cri-tools, buildkitd, docker-compose, volume-modifier-for-k8s, kubernetes, kubevela, k3s, kubescape, metrics-server, temporal, kine, kubernetes-csi-external-resizer, envoy-ratelimit...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: metrics-server-fips, smarter-device-manager-fips, bank-vaults-fips, aactl, kubernetes-csi-livenessprobe, terraform-provider-sendgrid-fips, vault-csi-provider, kiam, slsa-verifier, plutono-fips, falcoctl-fips, src, volume-modifier-for-k8s-fips,...

GHSA-F4W6-3RH6-6Q4Q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...