https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T04:07:41.553767+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-183935 EUVD-2026-183935 2026-10-08T04:07:41.609110+00:00 EUVD-2026-183935 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8568 fkie_cve-2020-8568 2026-10-08T04:07:41.609147+00:00

Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under var/lib/kubelet/pods that contain other Kubernetes Secrets.

 https://cve.radiocsirt.org/vuln/ghsa-5cgx-vhfp-6cf9 GHSA-5cgx-vhfp-6cf9 — Directory traversal in Kubernetes Secrets Store CSI Driver 2026-10-08T04:07:41.609181+00:00

Affected: Go: sigs.k8s.io/secrets-store-csi-driver

Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a `SecretProviderClassPodStatus/Status` resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under `var/lib/kubelet/pods` that contain other Kubernetes Secrets.

### Specific Go Packages Affected sigs.k8s.io/secrets-store-csi-driver/controllers sigs.k8s.io/secrets-store-csi-driver/pkg/rotation sigs.k8s.io/secrets-store-csi-driver/pkg/secrets-store

 https://cve.radiocsirt.org/vuln/gsd-2020-8568 gsd-2020-8568 2026-10-08T04:07:41.609209+00:00 gsd-2020-8568