GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: virt-controller, amazon-ssm-agent-fips, virt-controller-fips, virt-handler, virt-api, cloudflared-fips, eks-distro-fips, amazon-cloudwatch-agent-fips, amazon-ssm-agent, cluster-api, etcd-fips, infinispan-operator, kubevela-fips, loki, cluster-api-fips, virt-launcher,...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, guac, kube-arangodb, gpu-operator-fips, gpu-operator...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: tigera-operator, mongodb-kubernetes-operator-fips, scuttle-fips, yace, cluster-api-provider-vsphere, prometheus-blackbox-exporter, vexctl, kubernetes-dashboard-metrics-scraper, neuvector-dbgen-fips, falco-exporter-fips, knative-eventing-fips, blob-csi-fips, influxd,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: tigera-operator, mongodb-kubernetes-operator-fips, scuttle-fips, cluster-api-provider-vsphere, prometheus-blackbox-exporter, vexctl, kubernetes-dashboard-metrics-scraper, neuvector-dbgen-fips, falco-exporter-fips, knative-eventing-fips, blob-csi-fips, influxd,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: tigera-operator, mongodb-kubernetes-operator-fips, scuttle-fips, cluster-api-provider-vsphere, prometheus-blackbox-exporter, vexctl, kubernetes-dashboard-metrics-scraper, neuvector-dbgen-fips, falco-exporter-fips, knative-eventing-fips, blob-csi-fips, influxd,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: tigera-operator, mongodb-kubernetes-operator-fips, yace, prometheus-blackbox-exporter, sigstore-scaffolding-fips, grafana-rollout-operator, kubernetes-dashboard-metrics-scraper, neuvector-dbgen-fips, falco-exporter-fips, prometheus-mysqld-exporter, blob-csi-fips,...

CLEANSTART-2026-YA27020 Security fixes in gpu-operator-fips 25.10.0-r1

Package gpu-operator-fips version 25.10.0-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-BZ34358 Security fixes in gpu-operator 24.9.2-r1

Package gpu-operator version 24.9.2-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

CLEANSTART-2026-PZ11985 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, guac, kube-arangodb, gpu-operator-fips, gpu-operator...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, guac, kube-arangodb, gpu-operator-fips, gpu-operator...

CLEANSTART-2026-UI72173 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ME43638 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: tigera-operator, docker-cli-buildx, docker-cli-buildx-fips, cloudnative-pg, gitlab-runner, hubble, infinispan-operator, cluster-api-fips, tigera-operator-fips, percona-xtradb-cluster-operator, grafana, cloudbeat, jitsucom-bulker, redis-operator,...

CLEANSTART-2026-RR42740 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the gpu-operator package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...