CLEANSTART-2026-GK32867 Security fix for CVE-2026-1703 applied in: k8s-sidecar 1.25.2-r0, kubernetes-csi-driver-nfs-fips 4.13.0-r0, python3 3.11.14-r0, python3 3.12.12-r0

CVE-2026-1703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, aws-efs-csi-driver, kubernetes-csi-driver-hostpath, argocd-image-updater, nodetaint, argocd-image-updater-fips, rancher-webhook, kubernetes-dns-node-cache, ip-masq-agent, kubernetes, aws-efs-csi-driver-fips, local-static-provisioner,...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rke2-runtime-fips, harvester-fips, argo-cd-fips, azurefile-csi, eks-distro, longhorn-manager, longhorn-share-manager-fips, rancher-system-agent, cluster-autoscaler-fips, harvester, longhorn-share-manager, azuredisk-csi,...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kargo, conftest, smarter-device-manager, zarf, fulcio, certificate-transparency, kaniko, opentelemetry-collector, minio, cert-manager-cmctl, falcosidekick, spire-server, spegel, hubble-ui, dbmate, spicedb, trivy, kwok, opentelemetry-collector-contrib, k3s, rqlite,...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, argocd-image-updater, cri-tools, spark-operator, aws-efs-csi-driver, kubeflow-pipelines, k8s-device-plugin, nodetaint, ip-masq-agent, local-static-provisioner, kubernetes-csi-driver-hostpath...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, kubernetes-csi-driver-nfs, rancher-fleet, kubernetes-dns-node-cache, argo-rollouts, argocd-image-updater, kubernetes, vcluster, spark-operator, aws-efs-csi-driver, emissary, nodetaint, ip-masq-agent, kapp, local-static-provisioner,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: teleport, flyte, certificate-transparency, grafana-operator, dbmate, pdfcpu, spqr, kubevela, prometheus, mesosphere-vsphere-csi, prometheus-adapter, gitlab-pages, step, terraform-provider-tls, skopeo, aws-flb-firehose, aws-flb-kinesis, metacontroller,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: verticadb-operator, crossplane-provider-aws-cloudwatchlogs, gitleaks, cass-operator, headlamp, kube-bench, grafana-operator, timoni, chisel, crossplane-provider-aws-lambda, dbmate, wuzz, spqr, eksctl, mesosphere-vsphere-csi, stakater-reloader, grafana-rollout-operato...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: pluto, headlamp, kube-bench, terraform-provider-azapi, witness, eksctl, prometheus, oauth2-proxy, grafana-rollout-operator, kubecolor, step-kms-plugin, glow, tekton-chains, tflint, nats-server-config-reloader, aws-otel-collector, caddy, terraform, nri-rabbitmq, cerbo...

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

CLEANSTART-2026-OH47925 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-3864: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identifiers containing path traversal sequenc...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, kubernetes-csi-driver-nfs, rancher-fleet, kubernetes-dns-node-cache, argo-rollouts, argocd-image-updater, kubernetes, vcluster, spark-operator, aws-efs-csi-driver, emissary, nodetaint, ip-masq-agent, kapp, local-static-provisioner,...