CLEANSTART-2026-OV19069 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-p77j-4mvh-x3m3 applied in versions: 2.3.0-r1

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dbmate, local-path-provisioner, victoriametrics-cluster, external-secrets-operator, grafana-rollout-operator, apko, karpenter, flux-notification-controller, dkron, newrelic-infra-operator, tailscale, victoriametrics, osv-scanner, pluto, actions-runner-controller,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, temporal, flux-helm-controller-fips, ingress-nginx-controller-fips, external-secrets-operator-fips, oras-fips, aws-privateca-issuer, aws-load-balancer-controller, localstack, flux-source-controller, spire-server, k8s-metacollector,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: beats-fips, neuvector-dbgen-fips, prometheus-beat-exporter, restic-fips, kyverno-policy-reporter-ui, kubernetes-event-exporter-fips, prometheus-postgres-exporter, crossplane-provider-aws-dynamodb-fips, grpcurl-fips, ingress-nginx-controller-fips, argo-rollouts-fips,...