CLEANSTART-2026-BX77375 security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node

Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node...

CLEANSTART-2026-FB85377 In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secr...

Security vulnerability affects the nfs-subdir-external-provisioner package. In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry...

CLEANSTART-2026-HM58494 In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files

Security vulnerability affects the nfs-subdir-external-provisioner package. In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files...

CLEANSTART-2026-YO29710 Security fix for CVE-2020-8558 applied in: nfs-subdir-external-provisioner 4.0.2-r4

Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IW40098 Security fix for CVE-2021-25741 applied in: nfs-subdir-external-provisioner 4.0.2-r4

Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-120202

Highflame ramparts versions 0.8.1 through 0.8.10 are vulnerable to a security scan bypass. The vulnerability exists because the collect_bundle_siblings and walk_bundle_subdir functions skip nested directories and .pyc files. This allows attackers to hide malicious payloads by distributing a skill...

EUVD-2026-114723

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

CVE-2026-120202 Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

CVE-2026-120202 Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

CLEANSTART-2026-YO86500 Security fix for GHSA-8r3f-844c-mc37 applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0, metallb 0.13.12-r3

GHSA-8r3f-844c-mc37 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FX62991 Security fix for GHSA-6v2p-p543-phr9 applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0, metallb 0.13.12-r3

GHSA-6v2p-p543-phr9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZH56508 Security fix for GHSA-vvgc-356p-c3xw applied in: ollama-fips 0.34.4-r2, nfs-subdir-external-provisioner-fips 4.0.18-r0, metallb 0.13.12-r3

GHSA-vvgc-356p-c3xw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CN32502 Security fix for GHSA-6wxm-mpqj-6jpf applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OZ88127 Security fix for GHSA-hp87-p4gw-j4gq applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RD28885 Security fix for GHSA-cg3q-j54f-5p7p applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AX64771 Security fix for GHSA-v778-237x-gjrc applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YN28989 httpTokenCacheKey uses path

Security vulnerability affects the nfs-subdir-external-provisioner package. httpTokenCacheKey uses path...

CLEANSTART-2026-AH39342 Applications and libraries which misuse connection

Security vulnerability affects the nfs-subdir-external-provisioner package. Applications and libraries which misuse connection...

CLEANSTART-2026-VX47769 SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9

Security vulnerability affects the nfs-subdir-external-provisioner package. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9...

CLEANSTART-2026-BY73125 issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input

Security vulnerability affects the nfs-subdir-external-provisioner package. An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...