GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin-fips, node-feature-discovery-fips, sriov-network-device-plugin, rancher-agent, nvidia-container-toolkit, rancher, nvidia-container-toolkit-fips, cadvisor, buildah-fips, gpu-operator-fips, node-feature-discovery, k8s-device-plugin,...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin-fips, node-feature-discovery-fips, sriov-network-device-plugin, rancher-agent, nvidia-container-toolkit, rancher, nvidia-container-toolkit-fips, cadvisor, buildah-fips, gpu-operator-fips, node-feature-discovery, k8s-device-plugin,...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: rancher-agent, cadvisor, nvidia-container-toolkit, sriov-network-device-plugin, rancher, node-feature-discovery, k8s-device-plugin...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: rancher-agent, cadvisor, nvidia-container-toolkit, sriov-network-device-plugin, rancher, node-feature-discovery, k8s-device-plugin...

CLEANSTART-2026-QA91937 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-r6j8-c6r2-37rr applied in versions: 0.18.3-r1, 0.18.3-r2

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, livekit-server, velero-plugin-for-gcp-fips, harbor, vitess, falcosidekick-fips, kubescape-operator-fips, verticadb-operator-fips, cass-operator, gatekeeper, descheduler-fips, cert-manager, terragrunt-fips, containerd, kubescape-server, hydra-fips,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: buildah, podman, falco-no-driver, grafana-alloy, rancher-agent, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes, k3s, node-feature-discovery...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: buildah, podman, falco-no-driver, grafana-alloy, rancher-agent, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes, k3s, node-feature-discovery...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: buildah, podman, falco-no-driver, grafana-alloy, rancher-agent, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes, k3s, node-feature-discovery...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: buildah, podman, falco-no-driver, grafana-alloy, rancher-agent, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes, k3s, node-feature-discovery...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: podman, kubernetes-csi-driver-nfs, spegel, nvidia-container-toolkit, syft, undock, kots, dagger, xeol, k3s, zot, wolfictl, checksec, kubernetes, skaffold, zarf, neuvector-scanner, containerd, nerdctl, grafana-alloy, newrelic-infrastructure-agent, osv-scanner,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, cluster-autoscaler, grafana-alloy, sriov-network-device-plugin-fips, sriov-network-device-plugin, podman, rancher, rke2-runtime, node-feature-discovery, prometheus-podman-exporter, node-feature-discovery-fips, azure-container-networking,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, k8s-device-plugin-fips, datadog-agent-fips, undock, grype-fips, kubescape-operator-fips, neuvector-scanner-fips, sriov-network-device-plugin-fips, rke2-runtime-fips, skopeo, virt-handler, prometheus-podman-exporter, containerd, osv-scanner,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, k8s-device-plugin-fips, datadog-agent-fips, undock, grype-fips, kubescape-operator-fips, neuvector-scanner-fips, sriov-network-device-plugin-fips, rke2-runtime-fips, skopeo, virt-handler, prometheus-podman-exporter, containerd, osv-scanner,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, cluster-autoscaler, grafana-alloy, sriov-network-device-plugin-fips, sriov-network-device-plugin, podman, virt-handler-fips, rancher, rke2-runtime, virt-handler, node-feature-discovery, prometheus-podman-exporter, node-feature-discovery-fips,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, cluster-autoscaler, grafana-alloy, sriov-network-device-plugin-fips, sriov-network-device-plugin, podman, rancher, rke2-runtime, node-feature-discovery, prometheus-podman-exporter, node-feature-discovery-fips, azure-container-networking,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, cluster-autoscaler, grafana-alloy, sriov-network-device-plugin-fips, sriov-network-device-plugin, podman, virt-handler-fips, rancher, rke2-runtime, virt-handler, node-feature-discovery, prometheus-podman-exporter, node-feature-discovery-fips,...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin-fips, crossplane-provider-aws-lambda, nfs-subdir-external-provisioner, kube-logging-operator, clusterctl, crossplane-provider-sql, harbor, vertical-pod-autoscaler, vitess, falcosidekick-fips, crossplane-provider-sql-fips, azure-aad-pod-identity-mic,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: rancher-agent, cluster-autoscaler, rancher-system-agent, calico, cloud-provider-gcp-cloud-controller-manager, rancher, kubernetes-csi-driver-hostpath, yunikorn-k8shim, mesosphere-vsphere-csi, rancher-fleet, node-feature-discovery, vcluster, blob-csi, azuredisk-csi,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, argo-cd-fips, emissary, cluster-autoscaler, azurefile-csi, yunikorn-k8shim, blob-csi-fips, azuredisk-csi-fips, kubernetes-csi-driver-hostpath, rancher, argo-cd, node-feature-discovery, cloud-provider-gcp-cloud-controller-manager-fips,...