https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T22:25:32.234595+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380607 EUVD-2026-380607 2026-10-04T22:25:32.283882+00:00 EUVD-2026-380607 https://cve.radiocsirt.org/vuln/fkie_cve-2026-103505 fkie_cve-2026-103505 2026-10-04T22:25:32.283931+00:00

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the mounttargetipmap volumeAttribute.

To remediate this issue, users should upgrade to version v3.5.0 or later.

 https://cve.radiocsirt.org/vuln/ghsa-9w9f-p9qm-rcm4 GHSA-9w9f-p9qm-rcm4 2026-10-04T22:25:32.283984+00:00

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the mounttargetipmap volumeAttribute.

To remediate this issue, users should upgrade to version v3.5.0 or later.