CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: grafana-alloy, neuvector-scanner, cadvisor, syft, cadvisor-fips, buildah, cluster-autoscaler-fips, eks-distro, neuvector-scanner-fips, kubernetes, neuvector-fips, cluster-autoscaler, podman, neuvector, gosu, grafana-alloy-fips, k8s-device-plugin,...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: buildah, node-feature-discovery, cadvisor, sriov-network-device-plugin, nvidia-container-toolkit, podman, k8s-device-plugin...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: k3s, buildah, ctop, cadvisor, docker, grafana-alloy, kubernetes, syft, podman, runc, k8s-device-plugin, opentelemetry-collector-contrib, neuvector-scanner, grype...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, local-static-provisioner, nodetaint, cri-tools, argocd-image-updater, kubernetes-dns-node-cache, spark-operator, aws-efs-csi-driver, k8s-device-plugin, ip-masq-agent, kubeflow-pipelines...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: k3s, gitness, aws-load-balancer-controller, k8s-device-plugin, runc, fuse-overlayfs-snapshotter, wuzz...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, nodetaint, argocd-image-updater, kubernetes-dns-node-cache, aws-efs-csi-driver, k8s-device-plugin, ip-masq-agent, kubeflow-pipelines...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: k3s, gitness, aws-load-balancer-controller, k8s-device-plugin, runc, fuse-overlayfs-snapshotter, wuzz...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: k3s, karpenter, aws-flb-cloudwatch, kots, snyk-cli, aws-flb-kinesis, kube-fluentd-operator, chezmoi, coredns, external-secrets-operator, external-dns, cert-manager, go, nerdctl, spire-server, kubernetes-csi-node-driver-registrar, newrelic-fluent-bit-output, cilium,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cadvisor, cadvisor-fips, sriov-network-device-plugin-fips, buildah, prometheus-podman-exporter-fips, nvidia-container-toolkit-fips, node-feature-discovery-fips, podman-fips, nvidia-container-toolkit, k8s-device-plugin-fips, podman,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: buildah, node-feature-discovery, cadvisor, sriov-network-device-plugin, nvidia-container-toolkit, podman, k8s-device-plugin...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: k3s, karpenter, aws-flb-cloudwatch, kots, snyk-cli, aws-flb-kinesis, kube-fluentd-operator, chezmoi, coredns, external-secrets-operator, external-dns, cert-manager, go, nerdctl, spire-server, kubernetes-csi-node-driver-registrar, newrelic-fluent-bit-output, cilium,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: maru, mcp-grafana, polaris, percona-server-mongodb-operator, sriov-network-device-plugin, gitleaks, timescaledb-parallel-copy, filebrowser, step-issuer, terraform-docs, terraform-provider-time, chartmuseum, cert-manager-csi-driver, nuclei, cilium-certgen, istio,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: src-fingerprint, temporal-server, terraform-docs, chartmuseum, nuclei, metallb, containerd, crossplane-provider-azure, flux-helm-controller, petname, opa-envoy, argo-events, ytt, sftpgo, kwok, lazydocker, nats, spire-server, dockerize, kubernetes-replicator,...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter, dex, k8ssandra-operator, helm, prometheus, aws-load-balancer-controller, php-fpmexporter, dask-gateway, rabbitmq-messaging-topology-operator-fips, crossplane-provider-keycloak, dex-fips, q, frp, hello-world-golang, opentofu,...