GHSA-VWCJ-R8V9-P53F vulnerabilities

Vulnerabilities for packages: step-ca, cert-manager, opentelemetry-collector, hugo-extended, rclone, runc, hugo, wuzz, hubble, flux, k8s-device-plugin, prometheus-operator, k6, containerd, external-dns, kine, k3s, kaf, cilium-cli, loki, zot, gitea, telegraf, spire-server, helm,...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: nemo, kyverno, consul-k8s-fips, nvidia-nsight-compute-13.3, frankenphp-8.4, ingress-nginx-controller, karpenter, commercial-expanso-edge, omnictl-multiarch-fips, containerd, flux, commercial-gitlab-rails-ee, nvidia-nsight-compute-13.4, commercial-gitlab-rails-ee-fips...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: flux-source-controller, prometheus-adapter, grafana-alloy, atlantis, hubble-ui, cert-manager-webhook-pdns, falco-no-driver, opencost, argo-cd, mesosphere-vsphere-csi, cert-manager, grafana-pyroscope, rclone, filebrowser, juicefs, chartmuseum, k8s-device-plugin, flux,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: flux-source-controller, prometheus-adapter, grafana-alloy, atlantis, hubble-ui, cert-manager-webhook-pdns, falco-no-driver, opencost, argo-cd, mesosphere-vsphere-csi, cert-manager, grafana-pyroscope, rclone, filebrowser, juicefs, chartmuseum, k8s-device-plugin, flux,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: spire-server, aactl, kubernetes, k8s-device-plugin, flux, falco-no-driver, loki, ingress-nginx-controller, cert-manager, external-dns...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: spire-server, aactl, kubernetes, k8s-device-plugin, flux, falco-no-driver, loki, ingress-nginx-controller, cert-manager, external-dns...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: spire-server, aactl, kubernetes, k8s-device-plugin, flux, falco-no-driver, loki, ingress-nginx-controller, cert-manager, external-dns...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: grype, opentelemetry-collector-contrib, k3s, neuvector, cadvisor, kubernetes-fips, syft, cluster-autoscaler, neuvector-scanner, runc, kubernetes, cluster-autoscaler-fips, eks-distro, buildah, neuvector-fips, neuvector-scanner-fips, podman, k8s-device-plugin,...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, podman, cadvisor, k8s-device-plugin, falco-no-driver, sriov-network-device-plugin, nvidia-container-toolkit, buildah, node-feature-discovery...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: docker, syft, podman, runc, cadvisor, grafana-alloy, kubernetes, k3s, neuvector-scanner, opentelemetry-collector-contrib, k8s-device-plugin, grype, ctop, buildah...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, runc, fuse-overlayfs-snapshotter, k3s, gitness, wuzz, k8s-device-plugin...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, runc, fuse-overlayfs-snapshotter, k3s, gitness, wuzz, k8s-device-plugin...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: nodetaint, ip-masq-agent, spark-operator, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, aws-efs-csi-driver, local-static-provisioner, argocd-image-updater, k8s-device-plugin, cri-tools, kubeflow-pipelines...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: nodetaint, ip-masq-agent, kubernetes-dns-node-cache, aws-efs-csi-driver, local-static-provisioner, argocd-image-updater, k8s-device-plugin, kubeflow-pipelines...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: fscrypt, falco-no-driver, redka, argo-cd, cert-manager, chezmoi, gitaly, libnvidia-container, runc, cilium, nerdctl, hubble, flux, k8s-device-plugin, aws-flb-cloudwatch, prometheus-operator, ingress-nginx-controller, cloud-provider-aws, snyk-cli, kine, kaf, kots,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: podman-fips, k8s-device-plugin-fips, cadvisor, gpu-operator-fips, node-feature-discovery, buildah, gpu-operator, falco-no-driver, podman, nvidia-container-toolkit, prometheus-podman-exporter-fips, rancher, k8s-device-plugin, sriov-network-device-plugin-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, podman, cadvisor, k8s-device-plugin, falco-no-driver, sriov-network-device-plugin, nvidia-container-toolkit, buildah, node-feature-discovery...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: fscrypt, falco-no-driver, redka, argo-cd, cert-manager, chezmoi, gitaly, libnvidia-container, runc, cilium, nerdctl, hubble, flux, k8s-device-plugin, aws-flb-cloudwatch, prometheus-operator, ingress-nginx-controller, cloud-provider-aws, snyk-cli, kine, kaf, kots,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, kwok, aws-eks-pod-identity-agent, dapr, rancher-fleet, minio-operator, cert-manager, kbld, cert-manager-cmctl, terraform-mcp-server, trivy, vexctl, kube-state-metrics, volume-modifier-for-k8s, nats-top, kustomize, sonobuoy, bom, kaf, gitlab-page...