CLEANSTART-2026-ZC85272

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ZC85272.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-ZC85272

Upstream

CVE-2023-2728

Published

2026-11-05T08:10:47Z

Modified

2026-11-05T08:30:02Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers

Details

Security vulnerability affects the nfs-subdir-external-provisioner package. Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers.

References

Affected packages

CleanStart / nfs-subdir-external-provisioner

Package

Name: nfs-subdir-external-provisioner
Purl: pkg:apk/cleanstart/nfs-subdir-external-provisioner

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.2-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ZC85272.json"