GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, rke2-runtime-fips, cosmo-router-fips, etcd-fips, virt-controller-fips, aws-node-termination-handler-fips, op-geth, cilium, virt-api-fips, cloudflared, loki, cluster-api, kubevela-fips, loki-fips, eks-distro, aws-node-termination-handler, plutono-fip...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, nvidia-gpu-operator-validator...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, nvidia-gpu-operator-validator...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: kube-arangodb, gpu-operator-fips, guac, kube-arangodb-fips, gpu-operator...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: sealed-secrets, prometheus-node-exporter, step-kms-plugin, influxd, prometheus, longhorn-instance-manager, php-fpmexporter, dask-gateway, tekton-pipelines-fips, aws-s3-controller, trivy-operator-fips, gatekeeper, hello-world-golang, protoc-gen-go, opentofu, istio,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: sealed-secrets, kubernetes-csi-driver-nfs, prometheus-node-exporter, step-kms-plugin, influxd, prometheus, longhorn-instance-manager, php-fpmexporter, dask-gateway, tekton-pipelines-fips, q, aws-s3-controller, trivy-operator-fips, frp, gatekeeper, hello-world-golang,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: sealed-secrets, prometheus-node-exporter, step-kms-plugin, influxd, prometheus, longhorn-instance-manager, php-fpmexporter, dask-gateway, tekton-pipelines-fips, aws-s3-controller, trivy-operator-fips, gatekeeper, hello-world-golang, protoc-gen-go, opentofu, istio,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme-fips, libnvidia-container, kubernetes-csi-driver-nfs, prometheus-node-exporter, dex, envoy-gateway-fips, step-kms-plugin, k8ssandra-operator, influxd, helm, prometheus, aws-load-balancer-controller, php-fpmexporter, dask-gateway,...

CLEANSTART-2026-YA27020 Security fixes in gpu-operator-fips 25.10.0-r1

Package gpu-operator-fips version 25.10.0-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-BZ34358 Security fixes in gpu-operator 24.9.2-r1

Package gpu-operator version 24.9.2-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: kube-arangodb, gpu-operator-fips, guac, kube-arangodb-fips, gpu-operator...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: kube-arangodb, gpu-operator-fips, guac, kube-arangodb-fips, gpu-operator...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: headlamp-fips, envoy-gateway-fips, kubeflow-pipelines, kubernetes-dashboard-api-fips, redis-operator-fips, jitsucom-bulker, dynamic-localpv-provisioner-fips, trivy-operator-fips, argo-workflows-fips, neuvector, trident-fips, teleport-operator-fips,...

CLEANSTART-2026-RR42740 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the gpu-operator package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL76732 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-TW35447 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RL67763 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...