GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: verticadb-operator, cilium, virt-controller-fips, cluster-api-fips, longhorn-engine, aws-node-termination-handler-fips, eks-distro-fips, aws-node-termination-handler, amazon-cloudwatch-agent, virt-handler, juicefs-csi-driver, loki-fips, jitsucom-bulker, redis-operato...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, gpu-operator, guac, kube-arangodb-fips, kube-arangodb...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, bank-vaults, kubernetes-csi-driver-nfs, sriov-network-device-plugin-fips, helm-mapkubeapis, dfc, k8sgpt-operator, delve, minio-operator-fips, gobump, jaeger, cluster-autoscaler-fips, src-fingerprint-fips, kubernetes-csi-external-attacher...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, sriov-network-device-plugin-fips, helm-mapkubeapis, dfc, delve, minio-operator-fips, gobump, jaeger, src-fingerprint-fips, kubernetes-csi-external-attacher, aws-iam-authenticator-fips, yunikorn-web-fips, vt-cli, flyte,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, sriov-network-device-plugin-fips, helm-mapkubeapis, dfc, delve, minio-operator-fips, jaeger, src-fingerprint-fips, kubernetes-csi-external-attacher, aws-iam-authenticator-fips, yunikorn-web-fips, vt-cli, flyte, certificate-transparency,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: bank-vaults, kubernetes-csi-driver-nfs, kubernetes-dashboard-fips, nfs-subdir-external-provisioner-fips, sriov-network-device-plugin-fips, crossplane-provider-sql-fips, filebrowser, k8sgpt-operator, delve, minio-operator-fips, gobump, cluster-autoscaler-fips,...

CLEANSTART-2026-YA27020 Security fixes in gpu-operator-fips 25.10.0-r1

Package gpu-operator-fips version 25.10.0-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-BZ34358 Security fixes in gpu-operator 24.9.2-r1

Package gpu-operator version 24.9.2-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

CLEANSTART-2026-PZ11985 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, gpu-operator, guac, kube-arangodb-fips, kube-arangodb...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, gpu-operator, guac, kube-arangodb-fips, kube-arangodb...

CLEANSTART-2026-UI72173 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ME43638 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: neuvector, cilium, linkerd2, tigera-operator-fips, kiali, cloudnative-pg, kiali-fips, k8sgpt-operator, zarf, argocd-image-updater-fips, kubescape-server, docker-cli-buildx, sonobuoy, argocd-image-updater, eck-operator, percona-server-mongodb-operator-fips,...

CLEANSTART-2026-RR42740 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the gpu-operator package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...