CLEANSTART-2026-TL98903

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL98903.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-TL98903
Upstream
Published
2026-10-31T12:06:30Z
Modified
2026-10-31T16:04:22Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secr...
Details

Security vulnerability affects the nodetaint package. In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials.

References

Affected packages

CleanStart / nodetaint

Package

Name
nodetaint
Purl
pkg:apk/cleanstart/nodetaint

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.0.4-r1

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL98903.json"