GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: kube-arangodb, gpu-operator-fips, gpu-operator, guac, kube-arangodb-fips...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, kube-state-metrics, kyverno-policy-reporter-plugins-kyverno-fips, nerdctl, nodetaint, kubevela, trivy-operator, ucd, kube-metrics-adapter-fips, rootlesskit-fips, envconsul-fips, kubernetes-csi-external-snapshotter, git-sync-fips,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, kube-state-metrics, kyverno-policy-reporter-plugins-kyverno-fips, nerdctl, nodetaint, kubevela, trivy-operator, ucd, kube-metrics-adapter-fips, rootlesskit-fips, envconsul-fips, kubernetes-csi-external-snapshotter, git-sync-fips,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, kube-state-metrics, kyverno-policy-reporter-plugins-kyverno-fips, nerdctl, nodetaint, kubevela, trivy-operator, ucd, kube-metrics-adapter-fips, rootlesskit-fips, envconsul-fips, kubernetes-csi-external-snapshotter, git-sync-fips,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips, kube-state-metrics, nerdctl, nodetaint, kubevela, rootlesskit-fips, trillian-fips, clickhouse-operator-fips, kubernetes-csi-external-snapshotter, newrelic-prometheus-configurator, git-sync-fips, sftpgo-plugin-auth...

CLEANSTART-2026-BZ34358 Security fixes in gpu-operator 24.9.2-r1

Package gpu-operator version 24.9.2-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: kube-arangodb, gpu-operator-fips, gpu-operator, guac, kube-arangodb-fips...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: kube-arangodb, gpu-operator-fips, gpu-operator, guac, kube-arangodb-fips...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: infinispan-operator, neuvector, kwok, verticadb-operator, emissary, kubevela, trivy-operator, headlamp-fips, envoy-gateway, rancher-fleet-fips, vcluster, kiali-fips, datadog-agent-fips, kubescape-server, kubernetes-dashboard-api-fips, istio-fips,...

CLEANSTART-2026-RR42740 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the gpu-operator package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL76732 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-TW35447 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RL67763 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: wuzz, k8s-device-plugin, nvidia-gpu-operator-validator, gitlab-rails-ce, etcd, etcd-fips, fuse-overlayfs-snapshotter, gitness, cilium-envoy-fips, gendesk, cilium-envoy, backup-restore-operator, terraform, rke2-runtime-fips, rke2-runtime, runc, localstack, k3s,...

ROS-20251030-02

A vulnerability in the NVIDIA Virtual GPU Manager component of the NVIDIA Virtual GPU driver Virtual GPU is associated with incorrectly assigning permissions to a critical resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the NVIDIA...