CLEANSTART-2026-AS97636 Security fixes in mountpoint-s3-csi-driver 2.3.0-r1

Package mountpoint-s3-csi-driver version 2.3.0-r1 fixes 33 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143...

EUVD-2026-45968

Parsec is a cloud-based application for simple and cryptographically secure file sharing. The application does not sanitize the workspace name, creating a vulnerability if that workspace name is a UNC path. When creating mountpoint in the windows filesystem to mount the workspace of an...

PT-2026-61598

Name of the Vulnerable Software and Affected Versions Parsec affected versions not specified Description Parsec is a cloud-based application for secure file sharing. The application fails to sanitize the workspace name when creating a mountpoint in the Windows filesystem to mount an organization'...

CLEANSTART-2026-QN79037 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-p77j-4mvh-x3m3 applied in versions: 2.3.0-r1

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OV19069 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-p77j-4mvh-x3m3 applied in versions: 2.3.0-r1

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: apollo-router, komodo, pixi, deno, mountpoint-s3, yazi...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: apollo-router, komodo, pixi, deno, mountpoint-s3, yazi...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: yazi, pixi, mountpoint-s3, deno...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: yazi, pixi, mountpoint-s3, deno...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

GHSA-VP62-88P7-QQF5 Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

Summary A race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This advisory covers the race during mountpoint creation. The related race during the subsequent mount syscall is tracked in...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, newrelic-infra-operator, go, spire-server, apko, grafana-operator, flux-image-automation-controller, nodetaint, hubble, aws-privateca-issuer, secrets-store-csi-driver-provider-aws, victoriametrics-cluster, dkron, aws-load-balancer-controller,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: pluto, flux-source-watcher-fips, mountpoint-s3-csi-driver, fluxcd-kustomize-mutating-webhook-fips, nemo, dataplaneapi, rabbitmq-messaging-topology-operator-fips, flux-operator, ingress-nginx-controller-fips, apko, envoy-ratelimit-fips, smarter-device-manager,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: pluto, flux-source-watcher-fips, mountpoint-s3-csi-driver, fluxcd-kustomize-mutating-webhook-fips, nemo, dataplaneapi, rabbitmq-messaging-topology-operator-fips, flux-operator, ingress-nginx-controller-fips, apko, envoy-ratelimit-fips, smarter-device-manager,...

CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: go, k8s-device-plugin, boring-registry, rancher-webhook, kyverno-policy-reporter-kyverno-plugin, sftpgo, spiffe-helper, timestamp-authority, cri-tools, nats, rancher-machine, aws-nuke, smokescreen, terraform-provider-azapi, whereabouts,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: go, k8s-device-plugin, boring-registry, rancher-webhook, kyverno-policy-reporter-kyverno-plugin, sftpgo, spiffe-helper, timestamp-authority, cri-tools, nats, rancher-machine, aws-nuke, smokescreen, terraform-provider-azapi, whereabouts,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: pluto, google-cloud-otel-ops-collector, tempo, newrelic-infrastructure-agent, cloudflared, falco-no-driver, crossplane-function-auto-ready, librechat, spiffe-helper, flannel-fips, kubeflow-fips, quic-go, kubeflow-katib, q, trivy-fips,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003900 advisory. A pivotroot race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004304 advisory. A pivotroot race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x...