CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, containerd, reports-server, commercial-gitlab-workhorse-ee-fips, commercial-expanso-edge, flux, commercial-gitlab-workhorse-ee, kyverno, frankenphp-8.3, terraform, external-dns, opentelemetry-collector-k8s, google-osconfig-agent,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: karpenter, gitlab-pages, filebrowser, ingress-nginx-controller, chartmuseum, rancher, mesosphere-vsphere-csi, grafana, openbao, terragrunt, grafana-alloy, continuity, yunikorn-web, headlamp, hubble-ui, loki, spire-server, kube-arangodb, kubernetes, cert-manager,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, karpenter, loki, spire-server, aactl, kubernetes, cert-manager, ingress-nginx-controller, external-dns, falco-no-driver, flux...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: karpenter, gitlab-pages, filebrowser, ingress-nginx-controller, chartmuseum, rancher, mesosphere-vsphere-csi, grafana, openbao, terragrunt, grafana-alloy, continuity, yunikorn-web, headlamp, hubble-ui, loki, spire-server, kube-arangodb, kubernetes, cert-manager,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, karpenter, loki, spire-server, aactl, kubernetes, cert-manager, ingress-nginx-controller, external-dns, falco-no-driver, flux...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, karpenter, loki, spire-server, aactl, kubernetes, cert-manager, ingress-nginx-controller, external-dns, falco-no-driver, flux...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, opentelemetry-collector-contrib-fips, cluster-autoscaler, eks-distro, ctop, grype, docker, opentelemetry-collector-contrib, grafana-alloy-fips, neuvector-scanner-fips, runc, cadvisor, k3s, cadvisor-fips, podman, grafana-alloy,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, ctop, syft, opentelemetry-collector-contrib, runc, k3s, neuvector-scanner, cadvisor, grype, kubernetes, buildah, docker, podman, grafana-alloy...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, node-feature-discovery, docker-machine-driver-harvester, podman, buildah, nvidia-container-toolkit, falco-no-driver, cadvisor, sriov-network-device-plugin...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, local-static-provisioner, kubeflow-pipelines, nodetaint, argocd-image-updater, spark-operator, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, cri-tools, aws-efs-csi-driver, ip-masq-agent...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, local-static-provisioner, kubeflow-pipelines, nodetaint, argocd-image-updater, kubernetes-dns-node-cache, aws-efs-csi-driver, ip-masq-agent...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, runc, fuse-overlayfs-snapshotter, k3s, aws-load-balancer-controller, wuzz, gitness...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, runc, fuse-overlayfs-snapshotter, k3s, aws-load-balancer-controller, wuzz, gitness...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: chezmoi, karpenter, istio, kine, kots, gitlab-pages, ingress-nginx-controller, dask-gateway, kaf, cilium-cli, kubernetes-dashboard, gitlab-kas, aws-flb-firehose, kube-fluentd-operator, telegraf, zot, go, spire-server, gitaly, prometheus-operator, kubernetes,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: rancher, rancher-agent, node-feature-discovery, buildah-fips, sriov-network-device-plugin-fips, gpu-operator, cadvisor, cadvisor-fips, podman, gpu-operator-fips, podman-fips, k8s-device-plugin, docker-machine-driver-harvester, buildah, nvidia-container-toolkit,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, node-feature-discovery, docker-machine-driver-harvester, podman, buildah, nvidia-container-toolkit, falco-no-driver, cadvisor, sriov-network-device-plugin...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: chezmoi, karpenter, istio, kine, kots, gitlab-pages, ingress-nginx-controller, dask-gateway, kaf, cilium-cli, kubernetes-dashboard, gitlab-kas, aws-flb-firehose, kube-fluentd-operator, telegraf, zot, go, spire-server, gitaly, prometheus-operator, kubernetes,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: chezmoi, kine, docker-credential-ecr-login, kubernetes-csi-node-driver-registrar, oras, victoriametrics, whereabouts, rancher-webhook, gitaly, kubernetes-replicator, crane, chisel, hubble, k8sgpt-operator, pguser, runc, rancher-agent, git-sync, s5cmd,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: mockgen, cfssl, docker-credential-ecr-login, falcosidekick, oras, protoc-gen-go-grpc, kube-rbac-proxy, whereabouts, kubernetes-replicator, crane, runc, git-sync, harbor-registry, s5cmd, sftpgo-plugin-auth, pombump, nats, kuberlr, kube-bench, paranoia,...