CLEANSTART-2026-OV19069 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-p77j-4mvh-x3m3 applied in versions: 2.3.0-r1

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: yazi, komodo, pixi, apollo-router, mountpoint-s3, deno...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: yazi, komodo, pixi, apollo-router, mountpoint-s3, deno...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: pixi, yazi, mountpoint-s3, deno...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: pixi, yazi, mountpoint-s3, deno...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: go, flux, gh, github-mcp-server, sftpgo-plugin-eventsearch, clickhouse-operator, nfs-subdir-external-provisioner, newrelic-infra-operator, local-path-provisioner, victoriametrics, flux-image-reflector-controller, apko, nodetaint, volume-modifier-for-k8s,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, nova, dgraph, atlas, external-secrets-operator, kube-logging-logging-operator, volume-modifier-for-k8s, ingress-nginx-controller-fips, aws-privateca-issuer, aws-network-policy-agent, smarter-device-manager, supercronic, go, nemo,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, nova, dgraph, atlas, external-secrets-operator, kube-logging-logging-operator, volume-modifier-for-k8s, ingress-nginx-controller-fips, aws-privateca-issuer, aws-network-policy-agent, smarter-device-manager, supercronic, go, nemo,...

CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: prometheus-operator, aws-s3-controller, github-mcp-server, kubeflow-pipelines, lvm-driver, rancher-telemetry, kubernetes-dashboard, flux-notification-controller, kube-metrics-adapter, timescaledb-parallel-copy, vault-benchmark, helm-docs, verticadb-operator, spicedb,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: prometheus-operator, aws-s3-controller, github-mcp-server, kubeflow-pipelines, lvm-driver, rancher-telemetry, kubernetes-dashboard, flux-notification-controller, kube-metrics-adapter, timescaledb-parallel-copy, vault-benchmark, helm-docs, verticadb-operator, spicedb,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubebuilder, mattermost, aws-fsx-csi-driver, kubernetes-csi-external-snapshotter, influx, beats-fips, kubernetes-dashboard-api, nova, pgpool2exporter, nri-kafka, rancher-system-upgrade-controller, contour-fips, terraform-provider-random-fips, helm-docs,...