GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: plutono, op-geth, aws-node-termination-handler, amazon-cloudwatch-agent-fips, cloudflared-fips, cosmo-router-fips, redis-operator-fips, kubevela-fips, virt-controller-fips, etcd, cosmo-router, jitsucom-bulker, verticadb-operator, prometheus, infinispan-operator,...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

GO-2026-5822 vulnerabilities

Vulnerabilities for packages: guac, kube-arangodb, gpu-operator-fips, gpu-operator, kube-arangodb-fips...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, xcaddy, dex-k8s-authenticator, oauth2-proxy-fips, cluster-api-helm-controller, smarter-device-manager-fips, gatekeeper, rancher-agent, knative-serving-fips, cloudbeat-fips, stampdalf, bank-vaults,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, xcaddy, dex-k8s-authenticator, oauth2-proxy-fips, cluster-api-helm-controller, smarter-device-manager-fips, gatekeeper, rancher-agent, knative-serving-fips, cloudbeat-fips, stampdalf, cloud-provider-gcp-cloud-controller-manager-fips,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, xcaddy, dex-k8s-authenticator, oauth2-proxy-fips, cluster-api-helm-controller, smarter-device-manager-fips, gatekeeper, rancher-agent, knative-serving-fips, cloudbeat-fips, stampdalf, cloud-provider-gcp-cloud-controller-manager-fips,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose-fips, rabbitmq-default-user-credential-updater-fips, kubernetes-csi-driver-nfs-fips, eck-operator, xcaddy, dex-k8s-authenticator, oauth2-proxy-fips, smarter-device-manager-fips, libnvidia-container, kubernetes-dashboard-api, timestamp-authority-fips,...

CLEANSTART-2026-BZ34358 Security fixes in gpu-operator 24.9.2-r1

Package gpu-operator version 24.9.2-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: guac, kube-arangodb, gpu-operator-fips, gpu-operator, kube-arangodb-fips...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: guac, kube-arangodb, gpu-operator-fips, gpu-operator, kube-arangodb-fips...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, argocd-image-updater, eck-operator, docker-cli-buildx, redis-operator, postgres-operator-fips, kubernetes-dashboard-api, neuvector-fips, rke2-runtime-fips, percona-xtradb-cluster-operator, redis-operator-fips, rancher-agent,...

CLEANSTART-2026-RR42740 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the gpu-operator package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-OC72960 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL76732 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the gpu-operator package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-TW35447 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RL67763 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1

Multiple security vulnerabilities affect the gpu-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: cilium-envoy-fips, fuse-overlayfs-snapshotter, nvidia-gpu-operator-validator, k3s, rke2-runtime-fips, k8s-device-plugin, localstack, gendesk, etcd, aws-load-balancer-controller, cilium-envoy, runc, gitlab-rails-ce, wuzz, backup-restore-operator, etcd-fips, gitness,...