GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cilium, crossplane, telegraf, kots, kubernetes-csi-external-snapshotter, cluster-api-aws-controller, node-feature-discovery, kubernetes-csi-external-provisioner, flux-helm-controller, yunikorn-k8shim, istio, tkn, external-secrets-operator, cert-manager-webhook-pdns,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, memcached-exporter, vertical-pod-autoscaler, supercronic, ferretdb, newrelic-fluent-bit-output, vt-cli, dockerize, goreleaser, k3d, controller-gen, prometheus-alertmanager, nri-mysql, yq, k8sgpt, nri-couchbase, stakater-reloader,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: net-kourier, cilium, crossplane-provider-aws-cloudformation, blob-csi, percona-server-mongodb-operator, victoriametrics-operator, k8sgpt, crossplane-provider-aws-cloudwatchlogs, go-discover, aactl, eksctl, azuredisk-csi, crossplane-provider-aws-kms,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: net-kourier, cilium, percona-server-mongodb-operator, victoriametrics-operator, nri-mysql, stern, stakater-reloader, chart-testing, mkcert, go-discover, aactl, smokescreen, pdfcpu, php-fpmexporter, eksctl, flux-helm-controller, dive, promxy, terraform-provider-azapi,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, rabbitmq-messaging-topology-operator, tfsec, vertical-pod-autoscaler, ferretdb, newrelic-fluent-bit-output, pgpool2exporter,...

CLEANSTART-2026-LB37339 Security fixes in kubernetes-csi-external-resizer-fips 2.2.1-r1

Package kubernetes-csi-external-resizer-fips version 2.2.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-TB71092 Security fixes in kubernetes-csi-external-resizer-fips 2.1.0-r1

Package kubernetes-csi-external-resizer-fips version 2.1.0-r1 fixes 48 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-FW89965 Security fixes in kubernetes-csi-external-resizer 2.0.0-r0

Package kubernetes-csi-external-resizer version 2.0.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: net-kourier, crossplane-provider-aws-cloudformation, blob-csi, percona-server-mongodb-operator, victoriametrics-operator, nri-mysql, stern, k8sgpt, stakater-reloader, crossplane-provider-aws-cloudwatchlogs, go-discover, smokescreen, pdfcpu, eksctl, azuredisk-csi,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k9s, falcosidekick, memcached-exporter, rabbitmq-messaging-topology-operator, supercronic, ferretdb, pgpool2exporter, vertical-pod-autoscaler, crossplane, crossplane-provider-aws-cloudformation, kots, goreleaser, k3d, cilium-cli, prometheus-alertmanager, k8sgpt,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, temporal-server, kubescape, docker-compose, temporal, metrics-server, kine, kubernetes-csi-external-resizer, cri-tools, kubevela, buildkitd, kubernetes, envoy-ratelimit, k3s...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: scorecard, kubeflow-fips, kubernetes-csi-livenessprobe-fips, aws-efs-csi-driver-fips, aactl, slsa-verifier, kiam, bank-vaults-fips, cortex, kube-oidc-proxy, prometheus-stackdriver-exporter, plutono-fips, terraform-provider-sendgrid, kubevela,...

GHSA-F4W6-3RH6-6Q4Q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...