GHSA-f4w6-3rh6-6q4q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access

• Go github.com/kubernetes-csi/external-provisioner: < 0.4.3 → fixed in 0.4.3 • Go github.com/kubernetes-csi/external-provisioner: >= 1.0.0, < 1.0.2 → fixed in 1.0.2 • Go github.com/kubernetes-csi/external-provisioner: 1.1 (no fix yet) • Go github.com/kubernetes-csi/external-provisioner: >= 1.2.0, < 1.2.2 → fixed in 1.2.2 • Go github.com/kubernetes-csi/external-provisioner: >= 1.3.0, < 1.3.1 → fixed in 1.3.1 • Go github.com/kubernetes-csi/external-snapshotter/v6: >= 1.0.0, < 1.0.2 → fixed in 1.0.2 • Go github.com/kubernetes-csi/external-snapshotter/v6: 1.1 (no fix yet) • Go github.com/kubernetes-csi/external-snapshotter/v6: >= 1.2.0, < 1.2.2 → fixed in 1.2.2 • Go github.com/kubernetes-csi/external-resizer: 0.1 (no fix yet) • Go github.com/kubernetes-csi/external-resizer: 0.2 (no fix yet)

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, restore from snapshot, cloning and resizing operations.