GO-2024-2746 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, ip-masq-agent, spark-operator, aws-efs-csi-driver, aws-efs-csi-driver-fips, aws-ebs-csi-driver, kubernetes-csi-driver-hostpath, argocd-image-updater, argocd-image-updater-fips, kubernetes, kubernetes-dns-node-cache, rancher-webhook-fips,...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, ip-masq-agent, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, nodetaint, spark-operator, argocd-image-updater, cri-tools, local-static-provisioner, k8s-device-plugin...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, ip-masq-agent, kubernetes-dns-node-cache, aws-efs-csi-driver, argocd-image-updater, nodetaint, local-static-provisioner, k8s-device-plugin...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, vcluster, kapp, argo-rollouts, rancher-fleet, ip-masq-agent, kubernetes, kubernetes-csi-driver-nfs, kubernetes-dns-node-cache, emissary, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, rancher-webhook, spark-operator, argocd-image-updater,...

CLEANSTART-2026-BY81163 Security fixes in local-static-provisioner-fips 2.6.0-r1

Package local-static-provisioner-fips version 2.6.0-r1 fixes 6 vulnerabilities: CVE-2023-44487, ghsa-m425-mq94-257g, CVE-2024-24786, ghsa-8r3f-844c-mc37, CVE-2025-52881...

CLEANSTART-2026-MY88598 Security fixes in local-static-provisioner 2.8.0-r0

Package local-static-provisioner version 2.8.0-r0 fixes 10 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

CLEANSTART-2026-HA17896 Security fixes in local-static-provisioner 2.8.0-r2

Package local-static-provisioner version 2.8.0-r2 fixes 48 vulnerabilities: ghsa-4x4m-3c2p-qppc, ghsa-r6j8-c6r2-37rr, CVE-2025-13281, CVE-2025-5187, CVE-2026-25679...

CLEANSTART-2026-SD94217 Security fixes for CVE-2026-42504 applied in versions: 2.8.0-r3

Security vulnerability affects the local-static-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KN74022 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Security vulnerability affects the local-static-provisioner-fips package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: buildah, envoy-ratelimit, nfs-subdir-external-provisioner, spire-server, tetragon, vault-env, vault-secrets-webhook, rancher-telemetry, mongodb-kubernetes-operator, kubernetes-csi-livenessprobe, sftpgo-plugin-eventsearch, step-ca, falco-no-driver, vault-benchmark,...

CVE-2024-5321 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, ip-masq-agent, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, nodetaint, spark-operator, argocd-image-updater, cri-tools, local-static-provisioner, k8s-device-plugin...