GO-2024-2746 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, ip-masq-agent, kubernetes, nodetaint, kubernetes-csi-driver-hostpath, rancher-webhook, rancher-webhook-fips, spark-operator, kubeflow-pipelines, local-static-provisioner, argocd-image-updater, kubernetes-dns-node-cache, aws-ebs-csi-driver,...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, local-static-provisioner, argocd-image-updater, spark-operator, kubeflow-pipelines, cri-tools, k8s-device-plugin, nodetaint, ip-masq-agent, aws-efs-csi-driver...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, local-static-provisioner, argocd-image-updater, kubeflow-pipelines, k8s-device-plugin, nodetaint, ip-masq-agent, aws-efs-csi-driver...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, local-static-provisioner, vcluster, argocd-image-updater, spark-operator, kubernetes-csi-driver-nfs, emissary, rancher-fleet, kapp, rancher-webhook, argo-rollouts, ip-masq-agent, kubernetes,...

CLEANSTART-2026-BY81163 Security fixes in local-static-provisioner-fips 2.6.0-r1

Package local-static-provisioner-fips version 2.6.0-r1 fixes 6 vulnerabilities: CVE-2023-44487, ghsa-m425-mq94-257g, CVE-2024-24786, ghsa-8r3f-844c-mc37, CVE-2025-52881...

CLEANSTART-2026-MY88598 Security fixes in local-static-provisioner 2.8.0-r0

Package local-static-provisioner version 2.8.0-r0 fixes 10 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

CLEANSTART-2026-HA17896 Security fixes in local-static-provisioner 2.8.0-r2

Package local-static-provisioner version 2.8.0-r2 fixes 48 vulnerabilities: ghsa-4x4m-3c2p-qppc, ghsa-r6j8-c6r2-37rr, CVE-2025-13281, CVE-2025-5187, CVE-2026-25679...

CLEANSTART-2026-SD94217 Security fixes for CVE-2026-42504 applied in versions: 2.8.0-r3

Security vulnerability affects the local-static-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KN74022 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Security vulnerability affects the local-static-provisioner-fips package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: harbor, spire-controller-manager, envoy-ratelimit, kustomize, cluster-proportional-autoscaler, fscrypt, gostatsd, k8s-device-plugin, rancher-webhook, kuberlr, oauth2-proxy, kuberay-operator, podman, rancher-agent, kubernetes-dashboard, flannel, nats-server, terraform...

CVE-2024-5321 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, local-static-provisioner, argocd-image-updater, spark-operator, kubeflow-pipelines, cri-tools, k8s-device-plugin, nodetaint, ip-masq-agent, aws-efs-csi-driver...