CLEANSTART-2026-OV19069 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-p77j-4mvh-x3m3 applied in versions: 2.3.0-r1

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: mountpoint-s3, yazi, komodo, pixi, apollo-router, deno...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: mountpoint-s3, yazi, komodo, pixi, apollo-router, deno...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: yazi, pixi, deno, mountpoint-s3...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: yazi, pixi, deno, mountpoint-s3...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, go, grafana-operator, mariadb-operator, smarter-device-manager, local-path-provisioner, osv-scanner, stakater-reloader, dkron, aws-network-policy-agent, nova, spire-server, omnibump, flux-image-automation-controller,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller-fips, dbmate, newrelic-infra-operator, envoy-ratelimit, stakater-reloader, kubewatch, omnibump, omni-fips, newrelic-k8s-metadata-injection-fips, karpenter, clickhouse-operator, supercronic-fips, victoriametrics-fips,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller-fips, dbmate, newrelic-infra-operator, envoy-ratelimit, stakater-reloader, kubewatch, omnibump, omni-fips, newrelic-k8s-metadata-injection-fips, karpenter, clickhouse-operator, supercronic-fips, victoriametrics-fips,...

CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: s5cmd, kubeflow, vale, thanos, local-path-provisioner, regclient, php-fpmexporter, gatekeeper, azure-workload-identity-webhook, percona-server-mongodb-operator, nri-mysql, flux-notification-controller, nats, nri-kubernetes, oras, portieris, containerd,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: s5cmd, kubeflow, vale, thanos, local-path-provisioner, regclient, php-fpmexporter, gatekeeper, azure-workload-identity-webhook, percona-server-mongodb-operator, nri-mysql, flux-notification-controller, nats, nri-kubernetes, oras, portieris, containerd,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: thanos, newrelic-infra-operator, ratify, terraform-provider-databricks-fips, aws-sigv4-proxy, kubernetes-dashboard-auth, kubernetes-secret-generator, crossplane-provider-aws-kinesis-fips, etcd-fips, kapp-controller, chronyexporter-fips, kube-arangodb, kubewatch,...