GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: op-geth, longhorn-engine, redis-operator-fips, eks-distro-fips, etcd-fips, verticadb-operator-fips, cluster-api, loki, cloudflared, amazon-cloudwatch-agent-fips, virt-controller-fips, milvus, guac, jitsucom-bulker, eks-distro, cosmo-router, infinispan-operator,...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kube-arangodb-fips, guac, gpu-operator, gpu-operator-fips...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: cfssl, prometheus-process-exporter, prometheus-statsd-exporter-fips, yunikorn-k8shim-fips, cri-tools, gatekeeper-fips, xeol-fips, nova, gops, kube-logging-operator-custom-runner, incert, beats-fips, neuvector-dbgen-fips, linkerd2-cni-plugin, chartmuseum, net-kourier,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: cfssl, prometheus-process-exporter, prometheus-statsd-exporter-fips, yunikorn-k8shim-fips, cri-tools, gatekeeper-fips, terraform-ls, nova, xeol-fips, gops, kube-logging-operator-custom-runner, incert, beats-fips, neuvector-dbgen-fips, linkerd2-cni-plugin, chartmuseum...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: cfssl, prometheus-process-exporter, prometheus-statsd-exporter-fips, yunikorn-k8shim-fips, cri-tools, gatekeeper-fips, xeol-fips, nova, gops, kube-logging-operator-custom-runner, incert, beats-fips, neuvector-dbgen-fips, linkerd2-cni-plugin, chartmuseum, net-kourier,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: cfssl, prometheus-statsd-exporter-fips, yunikorn-k8shim-fips, cri-tools, verticadb-operator-fips, sftpgo-plugin-geoipfilter, blobfuse2, amazon-cloudwatch-agent-fips, incert, beats-fips, neuvector-dbgen-fips, nri-couchbase, chartmuseum, terraform-provider-acme-fips,...

CLEANSTART-2026-YA27020 Security fixes in gpu-operator-fips 25.10.0-r1

Package gpu-operator-fips version 25.10.0-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-BZ34358 Security fixes in gpu-operator 24.9.2-r1

Package gpu-operator version 24.9.2-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

CLEANSTART-2026-PZ11985 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

Security Bulletin: NVIDIA Container Toolkit - June 2026

NVIDIA has released a software update for NVIDIA® Container Toolkit. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation. Go to NVIDIA Product Security. Details The following table summarizes the potential...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: kube-arangodb, kube-arangodb-fips, guac, gpu-operator, gpu-operator-fips...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kube-arangodb-fips, guac, gpu-operator, gpu-operator-fips...

CLEANSTART-2026-UI72173 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ME43638 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: eck-operator-fips, cri-tools, verticadb-operator-fips, kots, headlamp-fips, terraform-provider-kubernetes-fips, jitsucom-bulker, kargo, hubble, plugin-barman-cloud-fips, vcluster, kcp-fips, terraform-provider-kubernetes, datadog-agent, cilium-fips, kubevela-fips,...

CLEANSTART-2026-RR42740 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the gpu-operator package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...