CLEANSTART-2026-SD94217 Security fixes for CVE-2026-42504 applied in versions: 2.8.0-r3

Security vulnerability affects the local-static-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KN74022 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Security vulnerability affects the local-static-provisioner-fips package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: gitness, rancher-helm, oauth2-proxy, volume-modifier-for-k8s, temporal, malcontent, boring-registry, ytt, haproxy-ingress, kafka-proxy, certificate-transparency, paranoia, flux-source-controller, apache-exporter, k8s-device-plugin, cerbos, local-path-provisioner,...

CVE-2024-5321 vulnerabilities

Vulnerabilities for packages: nodetaint, kubeflow-pipelines, k8s-device-plugin, kubernetes-csi-driver-hostpath, spark-operator, aws-efs-csi-driver, argocd-image-updater, kubernetes-dns-node-cache, cri-tools, local-static-provisioner, ip-masq-agent...