GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: cluster-api-fips, verticadb-operator, amazon-cloudwatch-agent-fips, redis-operator-fips, cloudflared-fips, etcd, gpu-operator-fips, infinispan-operator, virt-api-fips, prometheus-fips, kubevela, virt-controller-fips, cloudflared, plutono-fips, emissary,...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kube-arangodb-fips, gpu-operator, guac, gpu-operator-fips...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform, custom-pod-autoscaler-operator, trivy, k6-operator-fips, thanos-operator-fips, hello-world-golang, rekor, dockerize-fips, promxy-fips, minio-object-browser-fips, gitleaks, envconsul-fips, nvidia-nsight-compute-13.1, external-dns,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform, custom-pod-autoscaler-operator, thanos-operator-fips, hello-world-golang, rekor, dockerize-fips, promxy-fips, minio-object-browser-fips, nvidia-nsight-compute-13.1, envconsul-fips, external-dns, prometheus-mysqld-exporter,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: crossplane-provider-terraform, custom-pod-autoscaler-operator, thanos-operator-fips, hello-world-golang, rekor, dockerize-fips, promxy-fips, minio-object-browser-fips, nvidia-nsight-compute-13.1, envconsul-fips, external-dns, prometheus-mysqld-exporter,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: trivy, thanos-operator-fips, hello-world-golang, hubble-fips, flux-helm-controller-fips, rekor, dockerize-fips, promxy-fips, cadvisor-fips, dcgm-exporter-fips, karma, mongodb-kubernetes-operator-fips, prometheus-mysqld-exporter, aws-load-balancer-controller-fips,...

CLEANSTART-2026-YA27020 Security fixes in gpu-operator-fips 25.10.0-r1

Package gpu-operator-fips version 25.10.0-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-BZ34358 Security fixes in gpu-operator 24.9.2-r1

Package gpu-operator version 24.9.2-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

CLEANSTART-2026-PZ11985 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: kube-arangodb, kube-arangodb-fips, gpu-operator, guac, gpu-operator-fips...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kube-arangodb-fips, gpu-operator, guac, gpu-operator-fips...

CLEANSTART-2026-UI72173 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ME43638 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: cloudnative-pg-fips, trivy, dynamic-localpv-provisioner-fips, verticadb-operator, hubble-fips, argocd-image-updater, rancher, eck-operator-fips, gpu-operator-fips, infinispan-operator, kubevela, argocd-image-updater-fips, percona-xtradb-cluster-operator, trivy-fips,...

CLEANSTART-2026-RR42740 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the gpu-operator package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...