CLEANSTART-2026-DT88298 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, ghsa-r6j8-c6r2-37rr, ghsa-xjvp-4fhw-gc47 applied in versions: 0.18.3-r1, 0.18.3-r2, 0.18.3-r3

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, rancher-agent, k8s-device-plugin, podman, node-feature-discovery-fips, node-feature-discovery, nvidia-container-toolkit-fips, buildah, gpu-operator-fips, cadvisor, prometheus-podman-exporter-fips, rancher, buildah-fips, gpu-operator,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, rancher-agent, k8s-device-plugin, podman, node-feature-discovery-fips, node-feature-discovery, nvidia-container-toolkit-fips, buildah, gpu-operator-fips, cadvisor, prometheus-podman-exporter-fips, rancher, buildah-fips, gpu-operator,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, buildah, sriov-network-device-plugin, k8s-device-plugin, node-feature-discovery, podman, cadvisor...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, buildah, sriov-network-device-plugin, k8s-device-plugin, node-feature-discovery, podman, cadvisor...

CLEANSTART-2026-QA91937 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-r6j8-c6r2-37rr applied in versions: 0.18.3-r1, 0.18.3-r2

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: eks-distro, volsync-fips, longhorn-manager-fips, blob-csi-fips, volsync, flux-source-controller-fips, trivy, cluster-api-gcp-controller-fips, fluent-operator, headlamp, packer-fips, metrics-server-fips, podinfo, ferretdb, rancher-webhook, ksops, falcosidekick-fips,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: k3s, nvidia-container-toolkit, falco-no-driver, buildah, sriov-network-device-plugin, kubernetes, grafana-alloy, node-feature-discovery, podman...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: k3s, nvidia-container-toolkit, falco-no-driver, buildah, sriov-network-device-plugin, kubernetes, grafana-alloy, node-feature-discovery, podman...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: k3s, nvidia-container-toolkit, falco-no-driver, buildah, sriov-network-device-plugin, kubernetes, grafana-alloy, node-feature-discovery, podman...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: k3s, nvidia-container-toolkit, falco-no-driver, buildah, sriov-network-device-plugin, kubernetes, grafana-alloy, node-feature-discovery, podman...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, newrelic-infrastructure-agent, zot, undock, dagger, envoy-gateway, zarf, k9s, node-feature-discovery, syft, kubescape-operator, grype, k3s, nvidia-container-toolkit, sriov-network-device-plugin, docker, kubernetes-csi-driver-nfs, checksec,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: neuvector-scanner, newrelic-infrastructure-agent, zot, undock, dagger, envoy-gateway, zarf, k9s, node-feature-discovery, syft, kubescape-operator, grype, k3s, nvidia-container-toolkit, sriov-network-device-plugin, docker, kubernetes-csi-driver-nfs, checksec,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: eks-distro, virt-handler-fips, cluster-autoscaler-fips, eks-distro-fips, podman, rancher-agent, falco-no-driver, node-feature-discovery-fips, grafana-alloy, node-feature-discovery, k3s, buildah, virt-handler, cluster-autoscaler, rancher, prometheus-podman-exporter,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: eks-distro, google-osconfig-agent, spegel, blob-csi-fips, k8s-device-plugin, chainctl, trivy, grafana-alloy, docker-fips, dagger, kubernetes-csi-driver-nfs-fips, trivy-fips, prometheus-podman-exporter, osv-scanner, mesosphere-vsphere-csi, cg, ctop, skopeo,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: eks-distro, cluster-autoscaler-fips, eks-distro-fips, podman, rancher-agent, falco-no-driver, node-feature-discovery-fips, grafana-alloy, node-feature-discovery, k3s, buildah, cluster-autoscaler, rancher, prometheus-podman-exporter, sriov-network-device-plugin-fips,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: eks-distro, virt-handler-fips, cluster-autoscaler-fips, eks-distro-fips, podman, rancher-agent, falco-no-driver, node-feature-discovery-fips, grafana-alloy, node-feature-discovery, k3s, buildah, virt-handler, cluster-autoscaler, rancher, prometheus-podman-exporter,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: eks-distro, google-osconfig-agent, spegel, blob-csi-fips, k8s-device-plugin, chainctl, trivy, grafana-alloy, docker-fips, dagger, kubernetes-csi-driver-nfs-fips, trivy-fips, prometheus-podman-exporter, osv-scanner, mesosphere-vsphere-csi, cg, ctop, skopeo,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: eks-distro, cluster-autoscaler-fips, eks-distro-fips, podman, rancher-agent, falco-no-driver, node-feature-discovery-fips, grafana-alloy, node-feature-discovery, k3s, buildah, cluster-autoscaler, rancher, prometheus-podman-exporter, sriov-network-device-plugin-fips,...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: eks-distro, spegel, velero-plugin-for-csi, blob-csi-fips, k8s-device-plugin, opentelemetry-operator, flux-source-controller-fips, velero-plugin-for-microsoft-azure-fips, openbao-fips, trivy, grafana-alloy, fluent-operator, vendir, packer-fips, metrics-server-fips,...