CLEANSTART-2026-OV19069 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-p77j-4mvh-x3m3 applied in versions: 2.3.0-r1

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: apollo-router, pixi, yazi, komodo, deno, mountpoint-s3...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: apollo-router, pixi, yazi, komodo, deno, mountpoint-s3...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: yazi, pixi, mountpoint-s3, deno...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: yazi, pixi, mountpoint-s3, deno...

CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, tailscale, flux-notification-controller, dkron, victoriametrics-cluster, external-secrets-operator, gh, karpenter, metacontroller, spire-server, go, temporal, malcontent, dbmate, aws-network-policy-agent, fluxcd-kustomize-mutating-webhook,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: goreleaser, oras, dataplaneapi-fips, cilium-certgen-fips, flux-operator, external-secrets-operator-fips, envoy-ratelimit, pluto, karma-fips, nodetaint, ingress-nginx-controller, fluxcd-kustomize-mutating-webhook, github-mcp-server, supercronic,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: goreleaser, oras, dataplaneapi-fips, cilium-certgen-fips, flux-operator, external-secrets-operator-fips, envoy-ratelimit, pluto, karma-fips, nodetaint, ingress-nginx-controller, fluxcd-kustomize-mutating-webhook, github-mcp-server, supercronic,...

CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: spiffe-helper, terraform-provider-pagerduty, aws-application-networking-k8s, delve, knative-eventing, flux-image-reflector-controller, kserve-modelmesh-serving, gitaly, promxy, nri-mysql, node-problem-detector, restic, victoriametrics, percona-server-mongodb-operator...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: spiffe-helper, terraform-provider-pagerduty, aws-application-networking-k8s, delve, knative-eventing, flux-image-reflector-controller, kserve-modelmesh-serving, gitaly, promxy, nri-mysql, node-problem-detector, restic, victoriametrics, percona-server-mongodb-operator...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: regclient, secrets-store-csi-driver-provider-azure-fips, pulumi-language-yaml, metrics-server, nri-haproxy-fips, chartmuseum, harbor-registry-fips, aws-efs-csi-driver-fips, langfuse, dataplaneapi-fips, timestamp-authority-fips, kaniko-fips, step,...