CLEANSTART-2026-ZB55594 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r2

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r2 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-PP35477 Security fixes in secrets-store-csi-driver-provider-gcp 1.17.0-r1

Package secrets-store-csi-driver-provider-gcp version 1.17.0-r1 fixes 20 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: vault-csi-provider, secrets-store-csi-driver...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, py3-azure-identity, py3-cassandra-medusa, secrets-store-csi-driver-provider-azure, druid, flyte, ksops, guac, restic, sops, sqlpad, sigstore-scaffolding, chezmoi, fulcio, prometheus-operator, velero, bank-vaults, timestamp-authority, step-c...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, buildah, step-issuer, runc, azure-service-operator, gatus, juicefs, prometheus-operator, kuma, k8ssandra-client, conftest, temporal-server, kpt, zarf, dask-gateway, sftpgo-plugin-eventstore, secrets-store-csi-driver, kube-fluentd-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, helm-set-status, kubernetes-csi-driver-nfs, temporal-ui-server, timoni, runc, podinfo, maru, azure-service-operator, gatus, sbomqs, kubernetes-csi-external-provisioner, git-sync, nri-haproxy, src, vault-k8s, juicefs, influx,...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-TH78371 Security fixes in secrets-store-csi-driver-fips 1.5.4-r0

Package secrets-store-csi-driver-fips version 1.5.4-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, stakater-reloader, osv-scanner, flux-helm-controller, flux-notification-controller, dbmate, clickhouse-operator, kubewatch, secrets-store-csi-driver-provider-aws, victoriametrics-cluster, grafana-operator, aws-network-policy-agent,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, chart-testing-fips, cluster-api-azure-controller-fips, falcosidekick-fips, knative-operator, liquibase-package-manager, skaffold, ytt-fips, gptscript, jobset-fips, livekit-server-fips, temporal-server-fips,...

EUVD-2022-0837

Malicious code in bioql PyPI...

EUVD-2023-1539

Malicious code in bioql PyPI...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: knative-serving, gcp-compute-persistent-disk-csi-driver-fips, blobfuse2, newrelic-fluent-bit-output, prometheus-node-exporter-fips, memcached-exporter-fips, custom-pod-autoscaler-operator, docker-credential-ecr-login, kubeflow-katib, azuredisk-csi-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: knative-serving, gcp-compute-persistent-disk-csi-driver-fips, blobfuse2, newrelic-fluent-bit-output, prometheus-node-exporter-fips, memcached-exporter-fips, custom-pod-autoscaler-operator, docker-credential-ecr-login, kubeflow-katib, azuredisk-csi-fips,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: temporal-ui-server, timoni, runc, sbomqs, k8sgpt-operator, src, kubernetes-csi-external-provisioner, mage, nri-haproxy, vault-k8s, influx, smarter-device-manager, speedtest-go, k3d, nri-apache, ytt, pombump, delve, prometheus-operator, s5cmd, shfmt, dive, kwok,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, py3-azure-identity, py3-cassandra-medusa, secrets-store-csi-driver-provider-azure, druid, flyte, ksops, guac, restic, sops, sqlpad, sigstore-scaffolding, chezmoi, fulcio, prometheus-operator, velero, bank-vaults, timestamp-authority, step-c...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubeflow, temporal-ui-server, timoni, runc, k8sgpt-operator, k9s, src, kubernetes-csi-external-provisioner, terraform-provider-google, crossplane-provider-aws, vault-k8s, influx, crossplane-provider-aws-ec2, smarter-device-manager, k3d, prometheus-operator, kwok,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, falcosidekick-fips, skaffold, temporal-server-fips, terragrunt, crossplane-provider-family-aws, prometheus-operator, skopeo, kubescape, kube-state-metrics-fips, src, helm-operator-fips, osv-scanner, terraform, temporal-ui-server,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, cortex, dgraph, prometheus-adapter-fips, vault-csi-provider, aactl, prometheus-blackbox-exporter, terraform-provider-sendgrid-fips, kubernetes-csi-livenessprobe-fips, metrics-server-fips, scorecard, falcoctl-fips, kubescape,...