Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.4

yunikorn-k8shim could let attackers bypass controls

published 5 days ago
Summary

The yunikorn-k8shim component in version 1.5.2-r1 contains a weakness that could allow a malicious user to bypass normal security checks. This could lead to unauthorized actions within your Kubernetes environment. Update to a newer release of yunikorn-k8shim as soon as possible to close the gap.

What to do
  • Update cleanstart yunikorn-k8shim to version 1.5.2-r1.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart yunikorn-k8shim < 1.5.2-r1
Fix: upgrade to 1.5.2-r1
Original advisory text
Security fix for GHSA-cgrx-mc8f-2prm applied in: yunikorn-k8shim 1.5.2-r1
Security vulnerability affects the yunikorn-k8shim package. This issue is resolved in later releases. See references for vulnerability details.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
8.4 High
Timeline
Published30 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-AI23492 · OSV
Track software like this
Free during beta