CLEANSTART-2026-AY21238 security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion

Security vulnerability affects the kubernetes-dns-node-cache package. A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion...

CLEANSTART-2026-GQ31133 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-527x-5wrf-22m2, ghsa-9h8m-3fm2-qjrq, ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-p77j-4mvh-x3m3 applied in versions: 1.26.7-r0, 1.26.7-r1, 1.26.7-r2

Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: spegel, k3s, kyverno-policy-reporter-ui, kubo, traefik, teleport, k8sgateway, kubernetes-dns-node-cache, kargo, ipfs-cluster, frp, q, dkron, caddy...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: coredns, eks-distro, ipfs-cluster, dkron, k8sgateway, spegel, ipfs-cluster-fips, syncthing-fips, traefik, caddy-fips, frp, rke2-runtime, k3s, k8sgateway-fips, kargo, kyverno-policy-reporter-ui, kubernetes-dns-node-cache-fips, caddy, dkron-fips, q, teleport,...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: caddy-fips, coredns, eks-distro, q, kubernetes-dns-node-cache-fips, caddy, eks-distro-fips, frp, traefik-fips, kubernetes-dns-node-cache, spegel, coredns-fips, cloudflared, traefik, k3s, buf...

GHSA-27WF-5967-98GX vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, ip-masq-agent, nodetaint, argocd-image-updater, aws-efs-csi-driver, local-static-provisioner, kubeflow-pipelines, kubernetes-dns-node-cache...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, k8s-device-plugin, kubernetes-dns-node-cache-fips, local-static-provisioner, rancher-webhook-fips, kubeflow-pipelines, nodetaint, argocd-image-updater-fips, kubernetes-dns-node-cache, rancher-webhook, ip-masq-agent, argocd-image-updater,...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, ip-masq-agent, nodetaint, argocd-image-updater, aws-efs-csi-driver, local-static-provisioner, kubeflow-pipelines, kubernetes-dns-node-cache...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kubernetes, argocd-image-updater, aws-efs-csi-driver, local-static-provisioner, kubeflow-pipelines, nodetaint, spark-operator, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kubernetes, argocd-image-updater, aws-efs-csi-driver, local-static-provisioner, kubeflow-pipelines, nodetaint, spark-operator, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: configmap-reload, grpcurl, pulumi-language-yaml, terragrunt, crossplane-provider-aws-s3, certificate-transparency, crossplane-provider-aws-eks, crossplane-provider-aws-kms, gomplate, src, k8ssandra-operator, metallb, caddy, kubernetes-csi-driver-hostpath,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, prometheus-elasticsearch-exporter-fips, spire-server, temporal-server-fips, pulumi-kubernetes-operator, tflint, crossplane-provider-aws-route53, melange, kubeadm-controlplane-controller, weaviate, timoni, crossplane-provider-aws, cortex,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, prometheus-adapter, cluster-autoscaler-fips, aws-efs-csi-driver, nodetaint, kubernetes-dns-node-cache, ip-masq-agent, spark-operator, aws-efs-csi-driver-fips...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: ip-masq-agent, nodetaint, aws-efs-csi-driver, spark-operator, kubernetes-dns-node-cache, prometheus-adapter...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, prometheus-adapter, cluster-autoscaler-fips, aws-efs-csi-driver, nodetaint, kubernetes-dns-node-cache, ip-masq-agent, spark-operator, aws-efs-csi-driver-fips...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubevela, k3d, kube-fluentd-operator, k8sgpt-operator, prometheus-elasticsearch-exporter-fips, wireguard-go, azure-aad-pod-identity-mic, ollama, aws-ebs-csi-driver, prometheus-bind-exporter, pulumi-kubernetes-operator, prometheus-statsd-exporter-fips,...