CLEANSTART-2026-ZB55594 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r2

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r2 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-PP35477 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r1

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r1 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: vault-csi-provider, secrets-store-csi-driver...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: tkn, thanos, nuclei, flux-source-controller, airflow, ksops, sqlpad, falcoctl, tekton-chains, step-ca, up, cortex, cosign, restic, prometheus-operator, grafana-mimir, velero, step, buildkitd, flux, pulumi, terragrunt, boring-registry, opentelemetry-collector, zarf,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: minio, terraform-provider-tls, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, tekton-pipelines, kuma, kots, dex, istio, argo-cd, kubevela, cloudnative-pg, flyte, sops, kpt, tetragon, apko, cert-manager-csi-driver, fluent-bit-plugin-loki, helm-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: minio, crossplane-provider-aws-rds, db-operator, sbomqs, crossplane-provider-aws-s3, extism, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, wgcf, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, clickhouse-operator, dockerize,...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

The vulnerability of the secrets-store-csi-driver driver of the Kubernetes cluster management software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the secrets-store-csi-driver driver in the Kubernetes cluster management software is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CLEANSTART-2026-TH78371 Security fixes in secrets-store-csi-driver-fips 1.5.4-r0

Package secrets-store-csi-driver-fips version 1.5.4-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: pluto, flux-image-automation-controller, nova, gh, local-path-provisioner, tailscale, flux-source-controller, go, osv-scanner, smokescreen, clickhouse-operator, nfs-subdir-external-provisioner, actions-runner-controller, dkron, flux, metacontroller,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: render-template-fips, tigera-operator, cloudprober-fips, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, crane-fips, listmonk, dbmate, percona-server-mongodb-operator, quic-go, cert-manager-google-cas-issuer-fips, aactl, iptables-wrappers,...

EUVD-2023-1539

Malicious code in bioql PyPI...

EUVD-2022-0837

Malicious code in bioql PyPI...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler-operator, local-path-provisioner, mattmoor-chainit, kube-vip, terraform-provider-time, apm-server-fips, prometheus-nats-exporter, kube-logging-operator-custom-runner-fips, hivemind, cloud-provider-aws, mongodb-kubernetes-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler-operator, local-path-provisioner, mattmoor-chainit, kube-vip, terraform-provider-time, apm-server-fips, prometheus-nats-exporter, kube-logging-operator-custom-runner-fips, hivemind, cloud-provider-aws, mongodb-kubernetes-operator,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: wait-for-port, minio, sbomqs, delve, fq, k8sgpt-operator, k8ssandra-operator, hello-world-golang, aws-flb-cloudwatch, dockerize, src-fingerprint, nfs-subdir-external-provisioner, nri-haproxy, kyverno-policy-reporter-kyverno-plugin, temporal-ui-server, esbuild,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: tkn, thanos, nuclei, flux-source-controller, airflow, ksops, sqlpad, falcoctl, tekton-chains, step-ca, up, cortex, cosign, restic, prometheus-operator, grafana-mimir, velero, step, buildkitd, flux, pulumi, terragrunt, boring-registry, opentelemetry-collector, zarf,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: minio, crossplane-provider-aws-rds, crossplane-provider-aws-s3, terraform-provider-sendgrid, k8sgpt-operator, crossplane-provider-aws-kinesis, k8ssandra-operator, crossplane-provider-aws-sns, nfs-subdir-external-provisioner, kyverno-policy-reporter-kyverno-plugin,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, crossplane-provider-azure, aactl, tigera-operator-fips, cosign, secrets-store-csi-driver-provider-gcp, secrets-store-csi-driver-provider-azure, grpc-health-probe, melange, cri-tools, crossplane-provider-aws-firehose,...