Netapp Trident vulnerabilities

• microsoft trident CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident CVE-2026-22061 8.2 HighOctober 9, 2026
• go standard library net/http, golang go, http2 +4 more +6 more HTTP/2 rapid reset can cause excessive work in net/http CVE-2023-39325 Public exploitFix available 7.5 HighOctober 11, 2023
• yaml project yaml, netapp astra trident +1 more gopkg.in/yaml.v3 Denial of Service CVE-2022-28948 Fix available 7.5 HighMay 19, 2022
• golang go, debian linux, netapp astra trident +2 more regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... CVE-2022-24921 Fix available 7.5 HighMarch 5, 2022
• kubernetes ingress-nginx, netapp trident +1 more Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces CVE-2021-25742 Fix available 7.6 HighOctober 29, 2021
• golang go, fedoraproject fedora, netapp cloud insights telegraf +3 more +5 more The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key... CVE-2021-34558 Public exploitFix available 6.5 MediumJuly 15, 2021
• ecies go, netapp trident +1 more Authentication Bypass in github.com/russellhaering/gosaml2 CVE-2020-29509 Fix available 9.8 CriticalDecember 14, 2020
• ecies go, netapp trident +1 more The encoding/xml package in Go (all versions) does not correctly preserve the semantics of... CVE-2020-29511 Fix available 9.8 CriticalDecember 14, 2020
• ecies go, netapp trident +1 more The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the... CVE-2020-29510 Fix available 9.8 CriticalDecember 14, 2020
• golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 more Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. CVE-2020-28362 Fix available 7.5 HighNovember 18, 2020
• go toolchain cmd/cgo, cmd/go, golang go +3 more +5 more Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo CVE-2020-28366 Fix available 7.5 HighNovember 18, 2020
• apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 more Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service CVE-2019-9514 Fix available EPSS 82.8% 7.5 HighAugust 13, 2019
• kubernetes, netapp trident, redhat openshift container platform +2 more kubectl creates world-writeable cached schema files CVE-2019-11244 Fix available 3.3 LowApril 22, 2019
• kubernetes, netapp trident +1 more Kubernetes did not effectively clear service account credentials CVE-2019-11243 Fix available 3.1 LowApril 22, 2019
• kubernetes, netapp trident, redhat openshift container platform +2 more Privilege Escalation in Kubernetes CVE-2018-1002105 Public exploitFix available EPSS 87.0% 9.8 CriticalDecember 5, 2018