GO-2025-3992 NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator

NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

AlmaLinux 10 : toolbox (ALSA-2025:13674)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:13674 advisory. nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit CVE-2025-23266 Tenable has extracted the preceding description...

RockyLinux 10 : toolbox (RLSA-2025:13674)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:13674 advisory. nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit CVE-2025-23266 Tenable has extracted the preceding descriptio...

EUVD-2024-15935

Malicious code in bioql PyPI...

EUVD-2025-3156

Malicious code in bioql PyPI...

EUVD-2025-21818

Malicious code in bioql PyPI...

EUVD-2024-3026

Malicious code in bioql PyPI...

EUVD-2025-21811

Malicious code in bioql PyPI...

EUVD-2024-15934

Malicious code in bioql PyPI...

EUVD-2024-15936

Malicious code in bioql PyPI...

EUVD-2024-3083

Malicious code in bioql PyPI...

toolbox security update

An update is available for toolbox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Toolbox is a tool for Linux operating systems, which allows the use of...

CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-3

CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-3. A patched version of the package is available...

CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-2

CVE-2025-22872 affecting package nvidia-container-toolkit for versions less than 1.17.8-2. A patched version of the package is available...

Exploit for CVE-2025-23266

CVE-2025-23266 Author: Mark Mallia Target platform: U...

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

...

CVE-2025-23266 affecting package nvidia-container-toolkit for versions less than 1.17.8-1

CVE-2025-23266 affecting package nvidia-container-toolkit for versions less than 1.17.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-23266 affecting package nvidia-container-toolkit for versions less than 1.17.8-1

CVE-2025-23266 affecting package nvidia-container-toolkit for versions less than 1.17.8-1. An upgraded version of the package is available that resolves this issue...

nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit

A flaw was found in the NVIDIA Container Toolkit. This vulnerability allows execution of arbitrary code with elevated permissions via improperly secured container initialization hooks. This can potentially lead to privilege escalation, data tampering, information disclosure, and denial of service...

nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit

A flaw was found in the NVIDIA Container Toolkit. This vulnerability allows execution of arbitrary code with elevated permissions via improperly secured container initialization hooks. This can potentially lead to privilege escalation, data tampering, information disclosure, and denial of service...