CLEANSTART-2026-YW36992
See a problem?- Import Source
- https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YW36992.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLEANSTART-2026-YW36992
- Upstream
- Published
- 2026-10-31T14:00:30Z
- Modified
- 2026-10-31T16:30:39Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers
- Details
-
CVE-2023-2728 affects multiple packages. Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. See references for individual vulnerability details.
- References
Affected packages
CleanStart / nodetaint
Package
- Name
- nodetaint
- Purl
- pkg:apk/cleanstart/nodetaint