CLEANSTART-2026-XC13942 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, ingress-nginx-controller, oras, grafana-rollout-operator, tailscale, dataplaneapi, aws-privateca-issuer, nova, stakater-reloader, aws-network-policy-agent, pluto, secrets-store-csi-driver-provider-aws, envoy-ratelimit,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, mongodb-kubernetes-operator, pguser, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, litefs, grafana-pyroscope, terraform-provider-pagerduty, smarter-device-manager, opensearch-k8s-operator, karpenter, crossplane-provider-aws-eks,...