19450 matches found
CLEANSTART-2026-CM99599 Security fix for GHSA-w67g-5rqw-f597 applied in: argo-workflows 3.6.19-r8
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-NC43839 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the argo-workflows package. gRPC-Go is the Go language implementation of gRPC...
CLEANSTART-2026-ER07763 security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack...
CLEANSTART-2026-JF58043 As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Ser...
Security vulnerability affects the nfs-subdir-external-provisioner package. As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Services, Pods, Nodes, or...
CLEANSTART-2026-FB10821 kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal
Security vulnerability affects the nfs-subdir-external-provisioner package. kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal...
CLEANSTART-2026-FY02366 security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containe...
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, a...
CLEANSTART-2026-RQ66683 vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to ...
Security vulnerability affects the nfs-subdir-external-provisioner package. A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped...
CLEANSTART-2026-HL48184 This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node
Security vulnerability affects the nfs-subdir-external-provisioner package. This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node...
CLEANSTART-2026-ZC85272 Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers
Security vulnerability affects the nfs-subdir-external-provisioner package. Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers...
CLEANSTART-2026-CQ21511 Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers
Security vulnerability affects the nfs-subdir-external-provisioner package. Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers...
CLEANSTART-2026-GA88871 security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook...
CLEANSTART-2026-BQ17139 Kubernetes kube-controller-manager in versions v1
Security vulnerability affects the nfs-subdir-external-provisioner package. The Kubernetes kube-controller-manager in versions v1...
CLEANSTART-2026-DR37290 security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by f...
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...
CLEANSTART-2026-QF82458 This CVE affects only Windows worker nodes
Security vulnerability affects the nfs-subdir-external-provisioner package. This CVE affects only Windows worker nodes...
CLEANSTART-2026-GY44839 half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass
Security vulnerability affects the nfs-subdir-external-provisioner package. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass...
CLEANSTART-2026-LO67730 Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec
Security vulnerability affects the nfs-subdir-external-provisioner package. Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec...
CLEANSTART-2026-PN34035 Kubernetes kubelet component in versions 1
Security vulnerability affects the nfs-subdir-external-provisioner package. The Kubernetes kubelet component in versions 1...
CLEANSTART-2026-IV43532 Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec
Security vulnerability affects the nfs-subdir-external-provisioner package. Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec...
CLEANSTART-2026-BX77375 security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node...
CLEANSTART-2026-WF93004 In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs
Security vulnerability affects the nfs-subdir-external-provisioner package. In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs...
CLEANSTART-2026-FB85377 In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secr...
Security vulnerability affects the nfs-subdir-external-provisioner package. In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry...
CLEANSTART-2026-IU60943 Security fix for CVE-2020-8563 applied in: nfs-subdir-external-provisioner 4.0.2-r4
Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-VZ95093 security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement...
CLEANSTART-2026-JU22120 Security fix for CVE-2020-8561 applied in: nfs-subdir-external-provisioner 4.0.2-r4
Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-YD54961 security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion...
CLEANSTART-2026-HM58494 In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files
Security vulnerability affects the nfs-subdir-external-provisioner package. In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files...
CLEANSTART-2026-OK32487 Kubernetes kube-apiserver in versions v1
Security vulnerability affects the nfs-subdir-external-provisioner package. The Kubernetes kube-apiserver in versions v1...
CLEANSTART-2026-AC29768 security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes...
CLEANSTART-2026-AP67477 security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes...
CLEANSTART-2026-MI34546 security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes...
CLEANSTART-2026-YO29710 Security fix for CVE-2020-8558 applied in: nfs-subdir-external-provisioner 4.0.2-r4
Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-OZ11466 Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes
Security vulnerability affects the nfs-subdir-external-provisioner package. The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes...
CLEANSTART-2026-IW40098 Security fix for CVE-2021-25741 applied in: nfs-subdir-external-provisioner 4.0.2-r4
Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-BL60961 flaw was found in kube-controller-manager
Security vulnerability affects the nfs-subdir-external-provisioner package. A flaw was found in kube-controller-manager...
CLEANSTART-2026-HS37666 security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...
CLEANSTART-2026-AU23646 jsdiff is a JavaScript text differencing implementation
Security vulnerability affects the npm package. jsdiff is a JavaScript text differencing implementation...
CLEANSTART-2026-SJ85746 vulnerability was found in juliangruber brace-expansion up to 1
Security vulnerability affects the npm package. A vulnerability was found in juliangruber brace-expansion up to 1...
CLEANSTART-2026-VF42093 vulnerability was determined in postcss-selector-parser up to 6
Security vulnerability affects the npm package. A vulnerability was determined in postcss-selector-parser up to 6...
CLEANSTART-2026-FJ41942 PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it
Security vulnerability affects the npm package. PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it...
CLEANSTART-2026-NA13283 sigstore-js provides JavaScript libraries for interacting with Sigstore services
Security vulnerability affects the npm package. sigstore-js provides JavaScript libraries for interacting with Sigstore services...
CLEANSTART-2026-DJ92897 sigstore-js provides JavaScript libraries for interacting with Sigstore services
Security vulnerability affects the npm package. sigstore-js provides JavaScript libraries for interacting with Sigstore services...
CLEANSTART-2026-YQ08405 Versions of the package pacote from 11
Security vulnerability affects the npm package. Versions of the package pacote from 11...
CLEANSTART-2026-WA07330 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects
Security vulnerability affects the npm package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects...
CLEANSTART-2026-DA48333 ip-address before 10
Security vulnerability affects the npm package. ip-address before 10...
CLEANSTART-2026-GC84202 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
CLEANSTART-2026-WZ16137 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
CLEANSTART-2026-QK16586 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
CLEANSTART-2026-XH44968 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
CLEANSTART-2026-GV61449 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...