Skip to main content

Security fixes in yunikorn-k8shim 1.8.0-r1

0
Medium
Published: 08/13/2026 (08/13/2026, 12:10:09 UTC)
Source: GCVE Database
Product: yunikorn-k8shim

Description

The yunikorn-k8shim package version 1.8.0-r1 addresses three distinct security vulnerabilities identified by their GHSA identifiers. These vulnerabilities have been fixed in this specific version. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild at this time.

Affected software

Alpineghsa
yunikorn-k8shim
Affected versions
<1.8.0-r1=1.8.0-r1

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/14/2026, 17:05:40 UTC

Technical Analysis

The yunikorn-k8shim package version 1.8.0-r1 includes security fixes for three vulnerabilities referenced as ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, and ghsa-5cgq-3rg8-m6cv. The update is part of the Alpine ecosystem and is not related to a cloud service. No further technical details or severity metrics are provided in the source data.

Potential Impact

The impact specifics of the three fixed vulnerabilities are not detailed in the provided information. There are no known exploits in the wild, and no CVSS or severity ratings are available to assess the potential risk. The presence of multiple fixes suggests addressing security weaknesses that could potentially affect confidentiality, integrity, or availability, but exact impact is unknown.

Mitigation Recommendations

Upgrade to yunikorn-k8shim version 1.8.0-r1 to apply the security fixes for the three identified vulnerabilities. Since a patch is available and included in this version, applying this update is the recommended remediation. No additional mitigation guidance is provided.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
CLEANSTART-2026-TO97243
Osv Schema Version
1.7.3
Ecosystems
["Alpine"]

Threat ID: 6a7f4416bf8831d5395fe51b

Added to database: 08/14/2026, 16:36:38 UTC

Last enriched: 08/14/2026, 17:05:40 UTC

Last updated: 09/27/2026, 12:45:28 UTC

Views: 21

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses