CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: grafana-alloy, neuvector-scanner, eks-distro-fips, gosu, opentelemetry-collector-contrib-fips, podman, syft, grype, docker, opentelemetry-collector-contrib, cluster-autoscaler-fips, cluster-autoscaler, buildah, cadvisor, k3s, neuvector-scanner-fips, grafana-alloy-fip...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, buildah, k8s-device-plugin, node-feature-discovery, podman, falco-no-driver, nvidia-container-toolkit, cadvisor...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: docker, kubernetes, neuvector-scanner, opentelemetry-collector-contrib, runc, buildah, k8s-device-plugin, podman, grafana-alloy, grype, syft, k3s, ctop, cadvisor...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, local-static-provisioner, cri-tools, ip-masq-agent, k8s-device-plugin, spark-operator, nodetaint, argocd-image-updater, aws-efs-csi-driver, kubernetes-csi-driver-hostpath, kubeflow-pipelines...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: runc, k8s-device-plugin, wuzz, aws-load-balancer-controller, fuse-overlayfs-snapshotter, k3s, gitness...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: runc, k8s-device-plugin, wuzz, aws-load-balancer-controller, fuse-overlayfs-snapshotter, k3s, gitness...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, ip-masq-agent, k8s-device-plugin, nodetaint, argocd-image-updater, aws-efs-csi-driver, local-static-provisioner, kubeflow-pipelines...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, newrelic-fluent-bit-output, nerdctl, external-dns, kubernetes, runc, snyk-cli, istio, aactl, cert-manager, helm, kaf, hubble, kyverno, argo-cd, external-secrets-operator, aws-flb-firehose, telegraf, k8s-device-plugin, redka, karpenter, zot,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: rancher-agent, gpu-operator-fips, podman-fips, prometheus-podman-exporter, nvidia-container-toolkit-fips, podman, buildah-fips, node-feature-discovery, buildah, cadvisor, rancher, nvidia-container-toolkit, prometheus-podman-exporter-fips, k8s-device-plugin-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, buildah, k8s-device-plugin, node-feature-discovery, podman, falco-no-driver, nvidia-container-toolkit, cadvisor...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, newrelic-fluent-bit-output, nerdctl, external-dns, kubernetes, runc, snyk-cli, istio, aactl, cert-manager, helm, kaf, hubble, kyverno, argo-cd, external-secrets-operator, aws-flb-firehose, telegraf, k8s-device-plugin, redka, karpenter, zot,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nsc, pulumi, aactl, node-problem-detector, git-sync, opa-envoy, cert-exporter, lazygit, nri-redis, zot, ctop, litestream, kafka-proxy, cosign, dgraph, mesosphere-vsphere-csi, s5cmd, dask-gateway, hugo, yunikorn-web, terraform-provider-aws, envoy-gateway,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: nsc, aactl, git-sync, opa-envoy, dagdotdev, ctop, litestream, kafka-proxy, cosign, s5cmd, hello-world-golang, dask-gateway, yunikorn-web, kubernetes-release, thanos-operator, elvish, nri-couchbase, vertical-pod-autoscaler, cri-tools, docker-credential-acr-env, kaf,...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: kubernetes-release, sonobuoy, vault, thanos, gcp-compute-persistent-disk-csi-driver-fips, harbor-fips, amazon-k8s-cni, kafkaexporter, spiffe-helper, kubernetes-replicator-fips, kubernetes-dashboard-auth-fips, podman, minify, dex-fips, kube-vip, multus-cni,...