CLEANSTART-2026-ZB55594 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r2

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r2 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-PP35477 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r1

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r1 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: vault-csi-provider, secrets-store-csi-driver...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: fulcio, tkn, rekor, restic, opentelemetry-collector-contrib, terragrunt, guac, cosign, pulumi, up, spire-server, bank-vaults, py3-cassandra-medusa, timestamp-authority, py3-azure-identity, argo-events, rclone, grafana-mimir, flyte, flux-image-reflector-controller,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: tkn, kubernetes-csi-driver-nfs, dex, sftpgo-plugin-eventstore, gatekeeper, crossplane, terraform-provider-acme, libnvidia-container, kaf, kube-arangodb, conftest, gitlab-pages, prometheus-adapter, flyte, telegraf, grafana-alloy, aactl, vault-secrets-webhook,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, kubernetes-csi-driver-nfs, dex, timoni, ipfs-cluster, gatekeeper, local-path-provisioner, kuberay-operator, nri-nginx, dockerize, clickhouse-operator, croc, minio-operator, rabbitmq-default-user-credential-updater, cert-manager-istio-csr,...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-TH78371 Security fixes in secrets-store-csi-driver-fips 1.5.4-r0

Package secrets-store-csi-driver-fips version 1.5.4-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: tailscale, karpenter, sftpgo-plugin-eventsearch, local-path-provisioner, mountpoint-s3-csi-driver, kubewatch, temporal, clickhouse-operator, spire-server, external-secrets-operator, envoy-ratelimit, mariadb-operator, oras, nodetaint, grafana-operator, hubble,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: crossplane-fips, crossplane-provider-aws-elasticache, chaos-mesh, metrics-server, splunk-otel-collector, certificate-transparency, fluxcd-kustomize-mutating-webhook, rancher-system-agent, xeol-fips, actions-runner-controller, secrets-store-csi-driver-provider-aws,...

EUVD-2022-0837

Malicious code in bioql PyPI...

EUVD-2023-1539

Malicious code in bioql PyPI...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: stakater-reloader, yace-fips, secrets-store-csi-driver-provider-aws, openbao-k8s-fips, apm-server-fips, git-lfs, karpenter, kube-vip-cloud-provider, mattmoor-chainit, terraform-provider-time, docker-credential-ecr-login, vault-k8s, nvidia-nsight-compute-13.0,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: stakater-reloader, yace-fips, secrets-store-csi-driver-provider-aws, openbao-k8s-fips, apm-server-fips, git-lfs, karpenter, kube-vip-cloud-provider, mattmoor-chainit, terraform-provider-time, docker-credential-ecr-login, vault-k8s, nvidia-nsight-compute-13.0,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: hello-world-golang, nri-kafka, dex, fq, timoni, local-path-provisioner, kuberay-operator, go-md2man, dockerize, nri-nginx, pulumi, yam, kaf, govulncheck, nodetaint, prometheus-adapter, nri-nagios, volume-modifier-for-k8s, kor, kubernetes-event-exporter, wire-go,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: fulcio, tkn, rekor, restic, opentelemetry-collector-contrib, terragrunt, guac, cosign, pulumi, up, spire-server, bank-vaults, py3-cassandra-medusa, timestamp-authority, py3-azure-identity, argo-events, rclone, grafana-mimir, flyte, flux-image-reflector-controller,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: tkn, crossplane-provider-aws-rds, docker, dex, rekor, timoni, crossplane, local-path-provisioner, kuberay-operator, pulumi, crossplane-provider-aws-sqs, gitsign, kaf, conftest, kubernetes-csi-driver-hostpath, nodetaint, crossplane-provider-aws-eks, prometheus-adapter...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, kaniko, metrics-server, certificate-transparency, actions-runner-controller, secrets-store-csi-driver-provider-aws, newrelic-nri-kube-events, flux-kustomize-controller, frp, sigstore-scaffolding, kubeflow, grpc-health-probe,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s-fips, metrics-server-fips, kubernetes-csi-livenessprobe, spark-operator, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, buildkitd, kubernetes-csi-livenessprobe-fips, kubevela, cortex, dgraph,...