GO-2026-6610 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips, crossplane-provider-aws-appintegrations,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, opentelemetry-go-instrumentation, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, longhorn-backing-image-manager-fips,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, pluto, steampipe, kubescape, zot, sftpgo-plugin-kms, ksops, crossplane-provider-aws-sqs, k8sgpt, kyverno-policy-reporter-ui, rancher-agent, skaffold, tkn, newrelic-fluent-bit-output, tflint, terraform-provider-acme, zarf, opentofu,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, grpc-health-probe, external-secrets-operator, pluto, steampipe, kubescape, zot, sftpgo-plugin-kms, jaeger, ksops, crossplane-provider-aws-sqs, k8sgpt, kyverno-policy-reporter-ui, rancher-agent, skaffold, pulumi, tkn, terraform-docs,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, grpc-health-probe, external-secrets-operator, pluto, steampipe, kubescape, zot, sftpgo-plugin-kms, jaeger, ksops, crossplane-provider-aws-sqs, k8sgpt, kyverno-policy-reporter-ui, rancher-agent, skaffold, pulumi, tkn, terraform-docs,...

CLEANSTART-2026-RD37922 Security fix for ghsa-xjvp-4fhw-gc47 applied in: cadvisor 0.56.2-r1, cadvisor 0.57.0-r1, cadvisor 0.57.0-r2, cadvisor 0.60.2-r1, node-feature-discovery 0.18.3-r3

ghsa-xjvp-4fhw-gc47 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kots, cluster-api-ipam-provider-in-cluster, external-secrets-operator, kubernetes, descheduler, caddy, azure-service-operator, tekton-pipelines, cluster-api-azure-controller, emissary, flux-notification-controller, grafana, hubble-ui,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, rootlesskit-fips, cortex, envoy-ai-gateway-fips, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-keycloak, crossplane-provider-azure-servicelinker, atlantis-fips, longhorn-backing-image-manager-fips,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: neuvector, neuvector-scanner, docker, ctop, podman, buildah, kubernetes-fips, opentelemetry-collector-contrib-fips, eks-distro-fips, cluster-autoscaler, gosu, runc, cadvisor, kubernetes, opentelemetry-collector-contrib, cluster-autoscaler-fips, k3s, grafana-alloy,...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, podman, k3s, grafana-alloy, buildah, kubernetes, falco-no-driver, node-feature-discovery, sriov-network-device-plugin...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nvidia-container-toolkit, podman, falco-no-driver, buildah, node-feature-discovery, docker-machine-driver-harvester, cadvisor, sriov-network-device-plugin...

CLEANSTART-2026-SB38783 Security fixes in node-feature-discovery 0.18.3-r2

Package node-feature-discovery version 0.18.3-r2 fixes 6 vulnerabilities: CVE-2025-68121, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679, CVE-2026-27142...

CLEANSTART-2026-DT88298 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, ghsa-r6j8-c6r2-37rr, ghsa-xjvp-4fhw-gc47 applied in versions: 0.18.3-r1, 0.18.3-r2, 0.18.3-r3

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin-fips, k8s-device-plugin-fips, rancher, buildah-fips, podman, buildah, sriov-network-device-plugin, node-feature-discovery-fips, podman-fips, docker-machine-driver-harvester, cadvisor, prometheus-podman-exporter-fips, gpu-operator,...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin-fips, k8s-device-plugin-fips, rancher, buildah-fips, podman, buildah, sriov-network-device-plugin, node-feature-discovery-fips, podman-fips, docker-machine-driver-harvester, cadvisor, prometheus-podman-exporter-fips, gpu-operator,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nvidia-container-toolkit, podman, falco-no-driver, buildah, node-feature-discovery, docker-machine-driver-harvester, cadvisor, sriov-network-device-plugin...