CLEANSTART-2026-BY91929 Security fix for GHSA-hrxh-6v49-42gf applied in: loki 3.7.1-r2, secrets-store-csi-driver-provider-aws 3.1.4-r1

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PP35477 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r1

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r1 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-ZB55594 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r2

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r2 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver, vault-csi-provider...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: wal-g, k8sgpt, opentelemetry-collector, tkn, sigstore-scaffolding, zarf, tekton-chains, restic, flux, boring-registry, grafana-agent-operator, argo-workflows, flyte, terragrunt, up, fluent-bit-plugin-loki, flux-kustomize-controller, velero, py3-cassandra-medusa,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: helm-operator, tkn, sftpgo-plugin-eventstore, authservice, migrate, kubernetes-csi-driver-nfs, spqr, aws-flb-cloudwatch, apko, temporal-server, knative-serving, redka, secrets-store-csi-driver-provider-azure, sftpgo-plugin-auth, ko, prometheus-adapter,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: terraform-mcp-server, helm-operator, manifest-tool, crossplane-provider-aws-s3, neuvector-sigstore-interface, authservice, mongodb-kubernetes-operator, volume-modifier-for-k8s, gptscript, kubernetes-event-exporter, kubernetes-csi-driver-nfs, x509-certificate-exporter...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

secrets-store-csi-driver Unauthorized Access

The vulnerability of the secrets-store-csi-driver driver in the Kubernetes cluster management software is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CLEANSTART-2026-TH78371 Security fixes in secrets-store-csi-driver-fips 1.5.4-r0

Package secrets-store-csi-driver-fips version 1.5.4-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-FP92201 Security fixes in secrets-store-csi-driver-provider-gcp 1.15.0-r1

Package secrets-store-csi-driver-provider-gcp version 1.15.0-r1 fixes 21 vulnerabilities: CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830...

PT-2026-86045

Package secrets-store-csi-driver-fips version 1.5.4-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: tkn, kubernetes-csi-driver-nfs, spqr, nri-discovery-kubernetes, task, keda, cue, ksops, vertical-pod-autoscaler, melange, fluxcd-kustomize-mutating-webhook, kiali, libnvidia-container, chisel, crossplane-provider-aws-ec2, pvc-autoresizer, gatus, argo-rollouts, docker...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, temporal, flux-notification-controller, dbmate, victoriametrics-cluster, grafana-operator, clickhouse-operator, volume-modifier-for-k8s, envoy-ratelimit, supercronic, mountpoint-s3-csi-driver, victoriametrics, flux, nova,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, falcoctl-fips, crossplane-provider-aws-efs-fips, gomplate, kube-rbac-proxy, spire-controller-manager-fips, request-1279, ansible-operator, conftest, crossplane-provider-aws-elasticache, cilium-certgen, crossplane-provider-aws-s3-fips, nfpm,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, falcoctl-fips, crossplane-provider-aws-efs-fips, gomplate, kube-rbac-proxy, spire-controller-manager-fips, request-1279, ansible-operator, conftest, crossplane-provider-aws-elasticache, cilium-certgen, crossplane-provider-aws-s3-fips, nfpm,...

EUVD-2023-1539

Malicious code in bioql PyPI...

EUVD-2022-0837

Malicious code in bioql PyPI...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: ctop, kube-vip, grafana-operator, dagdotdev, rancher-machine, nats, mongodb-kubernetes-operator, shfmt, addon-resizer, terraform-provider-time, docker-credential-ecr-login, newrelic-fluent-bit-output, lvm-driver, k8sgpt-operator, vexctl, kserve-rest-proxy,...