GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, kube-arangodb, guac, gpu-operator-fips, gpu-operator...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, kratos, onepassword-operator, cloud-sql-proxy, kubernetes-replicator, consul-k8s, vault-secrets-webhook, nfs-subdir-external-provisioner, velero-plugin-for-csi-fips, gostatsd, beats-fips, kyverno, kubernetes-event-exporter, prometheus-fips...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, kratos, onepassword-operator, cloud-sql-proxy, kubernetes-replicator, consul-k8s, vault-secrets-webhook, cosign, nfs-subdir-external-provisioner, dcgm-exporter, gostatsd, velero-plugin-for-csi-fips, beats-fips, kyverno,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, kratos, onepassword-operator, cloud-sql-proxy, kubernetes-replicator, consul-k8s, vault-secrets-webhook, nfs-subdir-external-provisioner, velero-plugin-for-csi-fips, gostatsd, beats-fips, kyverno, kubernetes-event-exporter, prometheus-fips...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, cloud-sql-proxy, k8ssandra-operator, kubernetes-replicator, timestamp-authority-fips, sftpgo-plugin-eventstore, consul-k8s, nginx-prometheus-exporter, vault-secrets-webhook, nfs-subdir-external-provisioner, velero-plugin-for-csi-fips,...

CLEANSTART-2026-BZ34358 Security fixes in gpu-operator 24.9.2-r1

Package gpu-operator version 24.9.2-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, kube-arangodb, guac, gpu-operator-fips, gpu-operator...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, kube-arangodb, guac, gpu-operator-fips, gpu-operator...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: verticadb-operator, cloudnative-pg, eksctl, docker-cli-buildx-fips, consul-k8s, zarf-fips, argo-rollouts-fips, tigera-operator-fips, cloudbeat-fips, argocd-image-updater-fips, trivy, docker-cli-buildx, k9s-fips, tigera-operator, trivy-fips, rke2-runtime-fips,...

CLEANSTART-2026-RR42740 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the gpu-operator package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL76732 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-TW35447 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RL67763 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: runc, cilium-envoy-fips, etcd-fips, wuzz, fuse-overlayfs-snapshotter, k3s, aws-load-balancer-controller, terraform, etcd, backup-restore-operator, localstack, rke2-runtime-fips, gitness, gendesk, gitlab-rails-ce, nvidia-gpu-operator-validator, rke2-runtime,...

ROS-20251030-02

A vulnerability in the NVIDIA Virtual GPU Manager component of the NVIDIA Virtual GPU driver Virtual GPU is associated with incorrectly assigning permissions to a critical resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the NVIDIA...