CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, gpu-operator, buildah-fips, cadvisor-fips, prometheus-podman-exporter, gpu-operator-fips, nvidia-container-toolkit-fips, k8s-device-plugin-fips, rancher-agent, k8s-device-plugin, podman, prometheus-podman-exporter-fips, podman-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, gpu-operator, buildah-fips, cadvisor-fips, prometheus-podman-exporter, gpu-operator-fips, nvidia-container-toolkit-fips, k8s-device-plugin-fips, rancher-agent, k8s-device-plugin, podman, prometheus-podman-exporter-fips, podman-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: podman, nvidia-container-toolkit, cadvisor, rancher-agent, buildah, rancher, sriov-network-device-plugin, k8s-device-plugin, node-feature-discovery...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: podman, nvidia-container-toolkit, cadvisor, rancher-agent, buildah, rancher, sriov-network-device-plugin, k8s-device-plugin, node-feature-discovery...

CLEANSTART-2026-QA91937 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-r6j8-c6r2-37rr applied in versions: 0.18.3-r1, 0.18.3-r2

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: terraform-provider-google, hydra, kapp-controller, aws-ebs-csi-driver-fips, sftpgo-plugin-pubsub, buildkitd-fips, vault, teleport, cluster-api, prometheus-adapter, livekit-server-fips, gogatekeeper, kaniko, ory-kratos-fips, kubernetes-csi-external-resizer-fips,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: podman, nvidia-container-toolkit, rancher-agent, kubernetes, grafana-alloy, buildah, sriov-network-device-plugin, node-feature-discovery, k3s, falco-no-driver...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: podman, nvidia-container-toolkit, rancher-agent, kubernetes, grafana-alloy, buildah, sriov-network-device-plugin, node-feature-discovery, k3s, falco-no-driver...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: podman, nvidia-container-toolkit, rancher-agent, kubernetes, grafana-alloy, buildah, sriov-network-device-plugin, node-feature-discovery, k3s, falco-no-driver...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: podman, nvidia-container-toolkit, rancher-agent, kubernetes, grafana-alloy, buildah, sriov-network-device-plugin, node-feature-discovery, k3s, falco-no-driver...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: rancher-agent, syft, neuvector-scanner, containerd, newrelic-infrastructure-agent, undock, kubescape-operator, dagger, podman, kubernetes, mesosphere-vsphere-csi, sriov-network-device-plugin, nerdctl, wolfictl, k9s, kubescape, skopeo, zarf, envoy-gateway, buildah,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: rancher-agent, syft, neuvector-scanner, containerd, newrelic-infrastructure-agent, undock, kubescape-operator, dagger, podman, kubernetes, mesosphere-vsphere-csi, sriov-network-device-plugin, nerdctl, wolfictl, k9s, kubescape, skopeo, zarf, envoy-gateway, buildah,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: azure-container-networking, node-feature-discovery-fips, cluster-autoscaler, prometheus-podman-exporter, k3s, falco-no-driver, podman, eks-distro-fips, kubernetes-fips, rke2-runtime, virt-handler-fips, grafana-alloy, sriov-network-device-plugin, rancher,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: azure-container-networking, node-feature-discovery-fips, cluster-autoscaler, prometheus-podman-exporter, k3s, falco-no-driver, podman, eks-distro-fips, kubernetes-fips, rke2-runtime, grafana-alloy, sriov-network-device-plugin, rancher, nvidia-container-toolkit,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: azure-container-networking, node-feature-discovery-fips, cluster-autoscaler, prometheus-podman-exporter, k3s, falco-no-driver, podman, eks-distro-fips, kubernetes-fips, rke2-runtime, virt-handler-fips, grafana-alloy, sriov-network-device-plugin, rancher,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: grype, cg, rke2-runtime-fips, trivy-operator-fips, spegel-fips, xeol-fips, neuvector-scanner, osv-scanner, ctop, chainctl, k8s-device-plugin-fips, prometheus-podman-exporter-fips, nerdctl-fips, volcano-fips, volcano, spegel, virt-handler, k9s,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: grype, cg, rke2-runtime-fips, trivy-operator-fips, spegel-fips, xeol-fips, neuvector-scanner, osv-scanner, ctop, chainctl, k8s-device-plugin-fips, prometheus-podman-exporter-fips, nerdctl-fips, volcano-fips, volcano, spegel, virt-handler, k9s,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: azure-container-networking, node-feature-discovery-fips, cluster-autoscaler, prometheus-podman-exporter, k3s, falco-no-driver, podman, eks-distro-fips, kubernetes-fips, rke2-runtime, grafana-alloy, sriov-network-device-plugin, rancher, nvidia-container-toolkit,...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr-fips, volume-modifier-for-k8s-fips, aws-network-policy-agent, local-static-provisioner, secrets-store-csi-driver-provider-aws-fips, flux-image-automation-controller, terraform-provider-google, cloudflared, kubernetes-dashboard-metrics-scraper,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-fleet, cloud-provider-gcp-cloud-controller-manager, mesosphere-vsphere-csi, azuredisk-csi, rancher, node-feature-discovery, vcluster, rancher-system-agent, docker-machine-driver-harvester, kubernetes-csi-driver-hostpath, yunikorn-k8shim, argo-c...