CLEANSTART-2026-AY21238 security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion

Security vulnerability affects the kubernetes-dns-node-cache package. A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion...

CLEANSTART-2026-GQ31133 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-527x-5wrf-22m2, ghsa-9h8m-3fm2-qjrq, ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-p77j-4mvh-x3m3 applied in versions: 1.26.7-r0, 1.26.7-r1, 1.26.7-r2

Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: k8sgateway, k3s, caddy, kargo, spegel, traefik, dkron, frp, kubernetes-dns-node-cache, kyverno-policy-reporter-ui, ipfs-cluster, teleport, q, kubo...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: syncthing, kubernetes-dns-node-cache-fips, dkron, coredns, eks-distro-fips, kargo, spegel, caddy, q, kubo, kubernetes-dns-node-cache, kubo-fips, k3s, frp, ipfs-cluster-fips, coredns-fips, eks-distro, kyverno-policy-reporter-ui, syncthing-fips, ipfs-cluster,...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: spegel, caddy, q, kubernetes-dns-node-cache-fips, traefik-fips, buf, coredns-fips, cloudflared, eks-distro, kubernetes-dns-node-cache, coredns, eks-distro-fips, k3s, frp, traefik, caddy-fips...

GHSA-27WF-5967-98GX vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kubeflow-pipelines, k8s-device-plugin, kubernetes-dns-node-cache, nodetaint, aws-efs-csi-driver, argocd-image-updater, local-static-provisioner...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, ip-masq-agent, local-static-provisioner-fips, kubernetes-dns-node-cache-fips, kubeflow-pipelines, rancher-webhook, aws-efs-csi-driver, k8s-device-plugin, kubernetes-dns-node-cache, local-static-provisioner, argocd-image-updater,...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kubeflow-pipelines, k8s-device-plugin, kubernetes-dns-node-cache, nodetaint, aws-efs-csi-driver, argocd-image-updater, local-static-provisioner...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kubeflow-pipelines, kubernetes, spark-operator, kubernetes-dns-node-cache, nodetaint, aws-efs-csi-driver, kubernetes-csi-driver-hostpath, argocd-image-updater, local-static-provisioner...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kubeflow-pipelines, kubernetes, spark-operator, kubernetes-dns-node-cache, nodetaint, aws-efs-csi-driver, kubernetes-csi-driver-hostpath, argocd-image-updater, local-static-provisioner...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: helm-push, kubernetes-csi-external-provisioner, pulumi-kubernetes-operator, terraform-provider-google, dex, flux-image-reflector-controller, gomplate, rabbitmq-cluster-operator, hubble, protoc-gen-go-grpc, rclone, pulumi, grype, nats, argo-workflows, nri-prometheus,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, terragrunt, kube-bench, coredns, atlantis, secrets-store-csi-driver-provider-azure, osv-scanner, kwok, buf, contour, doppler-kubernetes-operator, cri-tools, docker-compose, kubernetes-dashboard-fips, dex-fips, external-dns-fips,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, ip-masq-agent, aws-efs-csi-driver, kubernetes-dns-node-cache, prometheus-adapter, spark-operator, aws-efs-csi-driver-fips, cluster-autoscaler-fips, nodetaint...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: ip-masq-agent, spark-operator, kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, prometheus-adapter...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, ip-masq-agent, aws-efs-csi-driver, kubernetes-dns-node-cache, prometheus-adapter, spark-operator, aws-efs-csi-driver-fips, cluster-autoscaler-fips, nodetaint...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: pulumi, coredns, k8sgpt, atlantis, pulumi-kubernetes-operator, prometheus-alertmanager, prometheus-operator, caddy, bom, kpt, cosign, k3s, aactl, up, frp, external-dns-fips, crossplane-provider-aws, kubernetes-dashboard-metrics-scraper, aws-efs-csi-driver-fips,...