GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: virt-handler-fips, cluster-api, kubevela-fips, milvus, aws-node-termination-handler-fips, virt-controller, etcd, plutono, amazon-ssm-agent-fips, aws-node-termination-handler, op-geth, prometheus, virt-controller-fips, juicefs-csi-driver, prometheus-fips,...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kube-arangodb-fips, gpu-operator-fips, gpu-operator, guac...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: kubebuilder, kubernetes-csi-external-snapshotter, beats-fips, nova, dgraph, pgpool2exporter, terraform-provider-random-fips, contour-fips, helm-docs, external-secrets-operator, cosign-fips, kratos, cri-tools, rancher-security-scan, docker-credential-gcr,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: kubebuilder, kubernetes-csi-external-snapshotter, beats-fips, nova, pgpool2exporter, terraform-provider-random-fips, contour-fips, helm-docs, external-secrets-operator, kratos, cri-tools, rancher-security-scan, docker-credential-gcr, smarter-device-manager,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: kubebuilder, kubernetes-csi-external-snapshotter, beats-fips, nova, pgpool2exporter, terraform-provider-random-fips, contour-fips, helm-docs, external-secrets-operator, kratos, cri-tools, rancher-security-scan, docker-credential-gcr, smarter-device-manager,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: kubebuilder, kubernetes-csi-external-snapshotter, influx, beats-fips, kubernetes-dashboard-api, dgraph, pgpool2exporter, nri-kafka, terraform-provider-random-fips, contour-fips, helm-docs, aws-flb-cloudwatch-fips, kubernetes-dns-node-cache-fips, buf, cri-tools,...

CLEANSTART-2026-BZ34358 Security fixes in gpu-operator 24.9.2-r1

Package gpu-operator version 24.9.2-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: kube-arangodb, kube-arangodb-fips, gpu-operator-fips, gpu-operator, guac...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kube-arangodb-fips, gpu-operator-fips, gpu-operator, guac...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, cluster-api, kubernetes-dashboard-api, skaffold-fips, argo-cd-fips, k8ssandra-client-fips, gitlab-kas-fips, k9s, redis-operator, cri-tools, kiali, plugin-barman-cloud, commercial-grafana, envoy-gateway-fips, k3s, argo-workflows-fips,...

CLEANSTART-2026-RR42740 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the gpu-operator package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL76732 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-TW35447 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RL67763 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: etcd, gendesk, cilium-envoy, terraform, k8s-device-plugin, rke2-runtime, k3s, rke2-runtime-fips, nvidia-gpu-operator-validator, backup-restore-operator, gitness, wuzz, fuse-overlayfs-snapshotter, gitlab-rails-ce, etcd-fips, cilium-envoy-fips, localstack,...