CLEANSTART-2026-OV19069 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-p77j-4mvh-x3m3 applied in versions: 2.3.0-r1

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: komodo, apollo-router, mountpoint-s3, deno, pixi, yazi...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: komodo, apollo-router, mountpoint-s3, deno, pixi, yazi...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: pixi, mountpoint-s3, yazi, deno...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: pixi, mountpoint-s3, yazi, deno...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, aws-load-balancer-controller, dbmate, gh, temporal, flux-operator, goreleaser, actions-runner-controller, grafana-rollout-operator, nfs-subdir-external-provisioner, osv-scanner, flux, apko, supercronic, tailscale,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: stakater-reloader, flux-helm-controller-fips, k8s-metacollector-fips, eks-node-monitoring-agent, newrelic-k8s-metadata-injection, karpenter-fips, flux-source-controller-fips, flux-operator-fips, dkron, smarter-device-manager, aws-network-policy-agent,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: stakater-reloader, flux-helm-controller-fips, k8s-metacollector-fips, eks-node-monitoring-agent, newrelic-k8s-metadata-injection, karpenter-fips, flux-source-controller-fips, flux-operator-fips, dkron, smarter-device-manager, aws-network-policy-agent,...

CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, kubernetes-dashboard-metrics-scraper, croc, knative-operator, mariadb-operator, argo-rollouts, karma, delve, nvidia-container-toolkit, lvm-driver, vale, kind, portieris, syft, nri-kafka, yunikorn-web, rancher-helm,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, kubernetes-dashboard-metrics-scraper, croc, knative-operator, mariadb-operator, argo-rollouts, karma, delve, nvidia-container-toolkit, lvm-driver, vale, kind, portieris, syft, nri-kafka, yunikorn-web, rancher-helm,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: authentik, prometheus, crossplane-provider-aws-ec2-fips, kube-bench, docker-credential-acr-env-fips, newrelic-infrastructure-agent, nri-couchbase-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, longhorn-backing-image-manager,...