{"id":"CLEANSTART-2026-YW36992","summary":"Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers","details":"CVE-2023-2728 affects multiple packages. Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. See references for individual vulnerability details.","modified":"2026-10-31T16:30:39.223723282Z","published":"2026-10-31T14:00:30.911268Z","upstream":["CVE-2023-2728"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YW36992.json"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2023-2728"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2728"}],"affected":[{"package":{"name":"nodetaint","ecosystem":"CleanStart","purl":"pkg:apk/cleanstart/nodetaint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.4-r1"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YW36992.json"}},{"package":{"name":"k3s","ecosystem":"CleanStart","purl":"pkg:apk/cleanstart/k3s"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.3.1-r0"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YW36992.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N"}]}