CLEANSTART-2026-ZB55594 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r2

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r2 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-PP35477 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r1

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r1 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver, vault-csi-provider...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: rclone, argo-events, pulumi, goreleaser, zot, flux-source-controller, flyte, restic, rook, policy-controller, opentelemetry-collector, timestamp-authority, grafana-mimir, py3-cassandra-medusa, step, zarf, opentelemetry-collector-contrib, tkn, boring-registry, flux,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, kubeflow-katib, tekton-pipelines, tempo, containerd, jitsucom-bulker, otel-cli, hubble, knative-eventing, prometheus-operator, telegraf, nerdctl, kuma, temporal-server, buildkitd, dex, rabbitmq-cluster-operator, apache-exporter, kube-arangodb,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ytt, hydra, kubeflow-katib, http-echo, kubernetes-replicator, pvc-autoresizer, docker-machine-driver-linode, ip-masq-agent, crossplane-provider-aws-cloudformation, crossplane-provider-aws-cloudfront, headlamp, container-object-storage-interface, hubble,...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-TH78371 Security fixes in secrets-store-csi-driver-fips 1.5.4-r0

Package secrets-store-csi-driver-fips version 1.5.4-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-FP92201 Security fixes in secrets-store-csi-driver-provider-gcp 1.15.0-r1

Package secrets-store-csi-driver-provider-gcp version 1.15.0-r1 fixes 21 vulnerabilities: CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: ytt, tailscale, kubeflow-katib, http-echo, k8sgpt-operator, crossplane-provider-aws-cloudformation, container-object-storage-interface, azuredisk-csi, nri-apache, aws-network-policy-agent, kuma, dataplaneapi, temporal-server, skaffold, terragrunt, gptscript, aws-nuke...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: tailscale, goreleaser, flux-source-controller, victoriametrics-cluster, nodetaint, mountpoint-s3-csi-driver, flux-notification-controller, hubble, go, osv-scanner, flux, flux-image-automation-controller, aws-network-policy-agent, victoriametrics, aws-privateca-issuer...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: victoriametrics-operator, kubeflow, gotestsum, aws-ebs-csi-driver-fips, crossplane-provider-kubernetes, kubernetes-dashboard-web-fips, kubevela-fips, terraform-provider-random, kubernetes-csi-external-health-monitor, fq, consul-k8s-fips, kong-ingress-controller,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator, kubeflow, gotestsum, aws-ebs-csi-driver-fips, crossplane-provider-kubernetes, kubernetes-dashboard-web-fips, kubevela-fips, terraform-provider-random, kubernetes-csi-external-health-monitor, fq, consul-k8s-fips, kong-ingress-controller,...

EUVD-2022-0837

Malicious code in bioql PyPI...

EUVD-2023-1539

Malicious code in bioql PyPI...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: checksec, kubeflow-katib, pvc-autoresizer, cloud-provider-aws, kserve-rest-proxy, custom-pod-autoscaler-operator, dagdotdev, k8sgpt-operator, rancher-machine, container-object-storage-interface, gostatsd, vault-benchmark, newrelic-nri-statsd, sftpgo-plugin-pubsub,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, blobfuse2, mongodb-kubernetes-operator, docker-credential-ecr-login, azuredisk-csi-fips, prometheus-bind-exporter, prometheus-process-exporter, node-problem-detector-fips, container-object-storage-interface, grafana-operator, sftpgo-plugin-geoipfilter...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, blobfuse2, mongodb-kubernetes-operator, docker-credential-ecr-login, azuredisk-csi-fips, prometheus-bind-exporter, prometheus-process-exporter, node-problem-detector-fips, container-object-storage-interface, grafana-operator, sftpgo-plugin-geoipfilter...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: ytt, tailscale, kubeflow-katib, http-echo, ip-masq-agent, k8sgpt-operator, wire-go, nodetaint, kube-state-metrics, mockery, rqlite, yam, nri-apache, flux-image-automation-controller, prometheus-operator, kustomize, nerdctl, bom, pulumi-language-yaml, cadvisor,...