Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Velero AWS plugin may let attackers access data
published 3 months ago
Summary
The Velero backup plugin for Amazon Web Services (cleanstart/velero-plugin-for-aws) has several weaknesses that could let a malicious user view or modify your backup information. This could expose sensitive data or disrupt recovery processes. Upgrade to version 1.13.2‑r2 as soon as possible to apply the fixes.
What to do
- Update cleanstart velero-plugin-for-aws to version 1.13.2-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | velero-plugin-for-aws |
< 1.13.2-r2 Fix: upgrade to 1.13.2-r2
|
Original advisory text
Security fixes in velero-plugin-for-aws 1.13.2-r2
Package velero-plugin-for-aws version 1.13.2-r2 fixes 5 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505, ghsa-xmrv-pmrh-hhx2, CVE-2026-33186
References
Timeline
Published30 Jul 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-LR68332 · OSV
Track software like this
Free during beta