CLEANSTART-2026-OV19069 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-p77j-4mvh-x3m3 applied in versions: 2.3.0-r1

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: apollo-router, pixi, deno, komodo, mountpoint-s3, yazi...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: apollo-router, pixi, deno, komodo, mountpoint-s3, yazi...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: deno, yazi, mountpoint-s3, pixi...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: deno, yazi, mountpoint-s3, pixi...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, stakater-reloader, dbmate, nodetaint, omnibump, oras, rabbitmq-messaging-topology-operator, envoy-ratelimit, gh, pluto, flux-image-automation-controller, dkron, ingress-nginx-controller, temporal, smarter-device-manager, tailscale,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, ingress-nginx-controller, kyverno-policy-reporter-plugins-kyverno, dapr-fips, flux-image-automation-controller, flux-image-reflector-controller-fips, nemo, victorialogs-fips, tailscale, aws-eks-pod-identity-agent-fips, listmonk, omnibump,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, ingress-nginx-controller, kyverno-policy-reporter-plugins-kyverno, dapr-fips, flux-image-automation-controller, flux-image-reflector-controller-fips, nemo, victorialogs-fips, tailscale, aws-eks-pod-identity-agent-fips, listmonk, omnibump,...

CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, temporal-server, container-object-storage-interface, argo-events, azcopy, postgres-operator, rabbitmq-default-user-credential-updater, kserve-modelmesh-serving, kube-vip-cloud-provider, kubernetes-csi-driver-hostpath,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, temporal-server, container-object-storage-interface, argo-events, azcopy, postgres-operator, rabbitmq-default-user-credential-updater, kserve-modelmesh-serving, kube-vip-cloud-provider, kubernetes-csi-driver-hostpath,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, bank-vaults, goose, kubernetes-csi-driver-nfs, kubernetes-dashboard-fips, nfs-subdir-external-provisioner-fips, sriov-network-device-plugin-fips, crossplane-provider-sql-fips, opentelemetry-collector-contrib-fips, delve,...