GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, flux-kustomize-controller, apisix-ingress-controller, kube-metrics-adapter, tetragon, cluster-api-helm-controller, tekton-pipelines, cert-manager-istio-csr, calico, cluster-api-provider-vsphere, opentelemetry-operator,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: supercronic, ip-masq-agent, q, cue, render-template, ctop, prometheus-adapter, nri-discovery-kubernetes, secrets-store-csi-driver-provider-gcp, thanos, prometheus-pushgateway, golangci-lint, gh, vault-k8s, local-path-provisioner,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: thanos, cilium-cli, gh, cluster-api-provider-vsphere, buildah, azcopy, dataplaneapi, mattermost, fuse-overlayfs-snapshotter, kiali, timestamp-authority, grafana-rollout-operator, kserve-rest-proxy, terragrunt, secrets-store-csi-driver-provider-aws, witness, eksctl,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, cloud-provider-vsphere, gitleaks, flux-kustomize-controller, ctop, apache-exporter, kyverno-policy-reporter-ui, cilium-cli, langfuse, golangci-lint, spire-server, crossplane-provider-aws-sns, local-path-provisioner, vault-k8s, mountpoint-s3-csi-driver,...

CLEANSTART-2026-LB37339 Security fixes in kubernetes-csi-external-resizer-fips 2.2.1-r1

Package kubernetes-csi-external-resizer-fips version 2.2.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-TB71092 Security fixes in kubernetes-csi-external-resizer-fips 2.1.0-r1

Package kubernetes-csi-external-resizer-fips version 2.1.0-r1 fixes 48 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-FW89965 Security fixes in kubernetes-csi-external-resizer 2.0.0-r0

Package kubernetes-csi-external-resizer version 2.0.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: cue, continuity, kyverno-policy-reporter-ui, cilium-cli, gh, kubernetes-ingress-defaultbackend, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, azcopy, dataplaneapi, mattermost, fuse-overlayfs-snapshotter, kiali...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: supercronic, ip-masq-agent, flux-kustomize-controller, ctop, terraform-provider-sendgrid, prometheus-adapter, nri-discovery-kubernetes, kyverno-policy-reporter-ui, secrets-store-csi-driver-provider-gcp, step-ca, cilium-cli, thanos, prometheus-pushgateway,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubevela, temporal-server, k3s, kubernetes, kine, kubernetes-csi-external-resizer, kubescape, volume-modifier-for-k8s, cri-tools, docker-compose, metrics-server, buildkitd, envoy-ratelimit, temporal...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, spark-operator, metrics-server-fips, slsa-verifier, prometheus-stackdriver-exporter, cortex, aactl, kiam, buildkitd, smarter-device-manager-fips, up, scorecard, kubernetes-csi-livenessprobe-fips, src, prometheus-blackbox-exporter, dgraph,...

GHSA-F4W6-3RH6-6Q4Q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...