CLEANSTART-2026-GZ23171 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...

CLEANSTART-2026-PD68934 pgjdbc, the PostgreSQL JDBC Driver, versions 42

Security vulnerability affects the keycloak package. pgjdbc, the PostgreSQL JDBC Driver, versions 42...

CLEANSTART-2026-NE91928 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...

CLEANSTART-2026-XH04096 pgjdbc, the PostgreSQL JDBC Driver, versions 42

Security vulnerability affects the keycloak package. pgjdbc, the PostgreSQL JDBC Driver, versions 42...

CLEANSTART-2026-RI44459 Security fix for CVE-2026-93879 applied in: keycloak 26.7.5-r3

Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZK89989 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...

CLEANSTART-2026-QY97145 In Bouncy Castle for Java before 1

Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-OB91626 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...

CLEANSTART-2026-CX51160 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...

CLEANSTART-2026-IK02301 In Bouncy Castle for Java before 1

Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-WP73469 In Bouncy Castle for Java before 1

Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-FQ55678 In Bouncy Castle for Java before 1

Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-XB82601 In Bouncy Castle for Java before 1

Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-SU19451 In Bouncy Castle for Java before 1

Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-ZQ04770 In Bouncy Castle for Java before 1

Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-SM65889 In Eclipse Vert

Security vulnerability affects the keycloak package. In Eclipse Vert...

CLEANSTART-2026-YA28277 In Bouncy Castle for Java before 1

Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-EU18176 In Eclipse Vert

Security vulnerability affects the keycloak package. In Eclipse Vert...

CLEANSTART-2026-IQ95501 jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declared type or would be ...

Security vulnerability affects the keycloak package. jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declared type or would be rejected as direct type IDs...

CLEANSTART-2026-KK12308 In Eclipse Vert

Security vulnerability affects the keycloak package. In Eclipse Vert...

CLEANSTART-2026-VM42813 In Eclipse Vert

Security vulnerability affects the keycloak package. In Eclipse Vert...

CLEANSTART-2026-KZ66366 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

Security vulnerability affects the restic package. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards...

CLEANSTART-2026-KQ60876 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

Security vulnerability affects the restic package. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards...

CLEANSTART-2026-CP16245 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

Security vulnerability affects the restic package. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards...

CLEANSTART-2026-EO92718 In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found

CVE-2026-97045 affects multiple packages. In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. See references for individual vulnerability details...

CLEANSTART-2026-LK07960 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n

CVE-2026-78661 affects multiple packages. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n. See references for individual vulnerability details...

CLEANSTART-2026-CM99599 Security fix for GHSA-w67g-5rqw-f597 applied in: argo-workflows 3.6.19-r8

Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NC43839 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the argo-workflows package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-ER07763 security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack

Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack...

CLEANSTART-2026-JF58043 As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Ser...

Security vulnerability affects the nfs-subdir-external-provisioner package. As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Services, Pods, Nodes, or...

CLEANSTART-2026-FB10821 kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal

Security vulnerability affects the nfs-subdir-external-provisioner package. kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal...

CLEANSTART-2026-FY02366 security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containe...

Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, a...

CLEANSTART-2026-RQ66683 vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to ...

Security vulnerability affects the nfs-subdir-external-provisioner package. A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped...

CLEANSTART-2026-HL48184 This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node

Security vulnerability affects the nfs-subdir-external-provisioner package. This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node...

CLEANSTART-2026-ZC85272 Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers

Security vulnerability affects the nfs-subdir-external-provisioner package. Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers...

CLEANSTART-2026-CQ21511 Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers

Security vulnerability affects the nfs-subdir-external-provisioner package. Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers...

CLEANSTART-2026-GA88871 security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook

Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook...

CLEANSTART-2026-BQ17139 Kubernetes kube-controller-manager in versions v1

Security vulnerability affects the nfs-subdir-external-provisioner package. The Kubernetes kube-controller-manager in versions v1...

CLEANSTART-2026-DR37290 security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by f...

Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

CLEANSTART-2026-QF82458 This CVE affects only Windows worker nodes

Security vulnerability affects the nfs-subdir-external-provisioner package. This CVE affects only Windows worker nodes...

CLEANSTART-2026-GY44839 half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass

Security vulnerability affects the nfs-subdir-external-provisioner package. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass...

CLEANSTART-2026-LO67730 Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec

Security vulnerability affects the nfs-subdir-external-provisioner package. Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec...

CLEANSTART-2026-PN34035 Kubernetes kubelet component in versions 1

Security vulnerability affects the nfs-subdir-external-provisioner package. The Kubernetes kubelet component in versions 1...

CLEANSTART-2026-IV43532 Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec

Security vulnerability affects the nfs-subdir-external-provisioner package. Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec...

CLEANSTART-2026-BX77375 security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node

Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node...

CLEANSTART-2026-WF93004 In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs

Security vulnerability affects the nfs-subdir-external-provisioner package. In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs...

CLEANSTART-2026-FB85377 In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secr...

Security vulnerability affects the nfs-subdir-external-provisioner package. In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry...

CLEANSTART-2026-IU60943 Security fix for CVE-2020-8563 applied in: nfs-subdir-external-provisioner 4.0.2-r4

Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VZ95093 security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement

Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement...

CLEANSTART-2026-JU22120 Security fix for CVE-2020-8561 applied in: nfs-subdir-external-provisioner 4.0.2-r4

Security vulnerability affects the nfs-subdir-external-provisioner package. This issue is resolved in later releases. See references for vulnerability details...