Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
cluster-proportional-autoscaler may allow unauthorized code execution
published 1 month ago
Summary
The cluster-proportional-autoscaler component can be manipulated by an attacker to run code that it should not run. This could let a malicious user gain control of the system that runs the autoscaler. Update to a newer version of the package as soon as possible to eliminate the risk.
What to do
- Update cleanstart cluster-proportional-autoscaler to version 1.7.1-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | cluster-proportional-autoscaler |
< 1.7.1-r0 Fix: upgrade to 1.7.1-r0
|
Original advisory text
Security fix for CVE-2022-3064 applied in: cluster-proportional-autoscaler 1.7.1-r0
Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details.
Timeline
Published18 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-YU71715 · OSV
Track software like this
Free during beta