CLEANSTART-2026-OV19069 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-p77j-4mvh-x3m3 applied in versions: 2.3.0-r1

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dgraph, dkron, actions-runner-controller, malcontent, mariadb-operator, metacontroller, nodetaint, tailscale, smokescreen, karpenter, temporal, victoriametrics, clickhouse-operator, aws-network-policy-agent, gh, spire-server, oras, sftpgo-plugin-eventsearch, polaris,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: victoriametrics, mariadb-operator, volume-modifier-for-k8s-fips, newrelic-k8s-metadata-injection, sealed-secrets-fips, flux-source-watcher, kubernetes-dashboard-metrics-scraper-fips, grafana-operator, temporal, flux-helm-controller, kubernetes-dashboard-web-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kyverno, aws-sigv4-proxy, crossplane-provider-aws-s3, amazon-k8s-cni, telegraf, terraform-provider-time, newrelic-k8s-metadata-injection, kubernetes-dashboard-auth-fips, envoy-gateway-fips, pguser, kong-ingress-controller, nri-nginx, crossplane-provider-family-aws,...