CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 é uma vulnerabilidade que eu submeti à NVIDIA PSIRT. Pessoalmente, ela pode levar a altos riscos de segurança em clusters HPC multi-inquilino, especialmente em plataformas de machine learning em nuvem. Este repositório simplesmente demonstra a vulnerabilidade em...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: grype, grafana-alloy-fips, kubernetes-fips, docker, k3s, cadvisor, opentelemetry-collector-contrib, neuvector, neuvector-fips, ctop, k8s-device-plugin, kubernetes, neuvector-scanner-fips, podman, runc, grafana-alloy, eks-distro, cluster-autoscaler,...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit, podman, k3s, sriov-network-device-plugin, kubernetes, grafana-alloy, buildah, falco-no-driver...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit, podman, k8s-device-plugin, sriov-network-device-plugin, cadvisor, buildah...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, podman, k8s-device-plugin, opentelemetry-collector-contrib, grype, k3s, docker, syft, cadvisor, ctop, kubernetes, grafana-alloy, buildah, runc...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: cri-tools, spark-operator, kubernetes-csi-driver-hostpath, argocd-image-updater, k8s-device-plugin, kubernetes-dns-node-cache, aws-efs-csi-driver, ip-masq-agent, kubeflow-pipelines, nodetaint, local-static-provisioner...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, k8s-device-plugin, kubernetes-dns-node-cache, kubeflow-pipelines, aws-efs-csi-driver, ip-masq-agent, nodetaint, local-static-provisioner...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: wuzz, k8s-device-plugin, gitness, aws-load-balancer-controller, k3s, fuse-overlayfs-snapshotter, runc...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: wuzz, k8s-device-plugin, gitness, aws-load-balancer-controller, k3s, fuse-overlayfs-snapshotter, runc...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: external-dns, k8s-device-plugin, aactl, external-secrets-operator, spire-server, kots, cilium, coredns, go, nerdctl, istio, chezmoi, mattermost, ingress-nginx-controller, gitaly, newrelic-fluent-bit-output, prometheus-operator, zot, k3s, runc, snyk-cli, cert-manager,...

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...

CVE-2026-53492

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...

github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...

github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: podman-fips, nvidia-container-toolkit, sriov-network-device-plugin, nvidia-container-toolkit-fips, cadvisor, prometheus-podman-exporter-fips, rancher-agent, k8s-device-plugin-fips, rancher, k8s-device-plugin, gpu-operator, prometheus-podman-exporter,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: podman-fips, nvidia-container-toolkit, sriov-network-device-plugin, nvidia-container-toolkit-fips, cadvisor, prometheus-podman-exporter-fips, rancher-agent, k8s-device-plugin-fips, rancher, k8s-device-plugin, gpu-operator, prometheus-podman-exporter,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit, podman, k8s-device-plugin, sriov-network-device-plugin, cadvisor, buildah...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit, podman, k8s-device-plugin, sriov-network-device-plugin, cadvisor, buildah...

containerd CRI checkpoint restore CDI annotation smuggling

Impact containerd's CRI implementation improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint, containerd preserves CDI-related annotations from the checkpoint archive...

CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...