GO-2026-6094 vulnerabilities

Vulnerabilities for packages: datadog-agent, flux-notification-controller, flux-helm-controller, kube-vip-cloud-provider, cert-manager, kubernetes-csi-external-health-monitor, cluster-api-gcp-controller, cloud-provider-aws, openfga, cloud-provider-azure, gitlab-kas, kots, opentelemetry-operator,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: chronyexporter-fips, vault-fips, commercial-chainloop-cli, longhorn-manager, rancher-system-upgrade-controller, crossplane-provider-aws-emr-fips, crossplane-function-patch-and-transform-fips, kyverno, crossplane-provider-aws-globalaccelerator-fips, kube-vip,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, cadvisor, k8s-device-plugin, docker, kubernetes-fips, runc, grafana-alloy, neuvector-fips, syft, neuvector-scanner-fips, eks-distro-fips, eks-distro, kubernetes, cluster-autoscaler-fips, ctop, grype, cadvisor-fips, podman, neuvector,...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: k3s, buildah, nvidia-container-toolkit, sriov-network-device-plugin, podman, kubernetes, falco-no-driver, node-feature-discovery, grafana-alloy...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: buildah, nvidia-container-toolkit, sriov-network-device-plugin, k8s-device-plugin, podman, falco-no-driver, node-feature-discovery, cadvisor...

CLEANSTART-2026-SB38783 Security fixes in node-feature-discovery 0.18.3-r2

Package node-feature-discovery version 0.18.3-r2 fixes 6 vulnerabilities: CVE-2025-68121, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679, CVE-2026-27142...

CLEANSTART-2026-DT88298 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, ghsa-r6j8-c6r2-37rr, ghsa-xjvp-4fhw-gc47 applied in versions: 0.18.3-r1, 0.18.3-r2, 0.18.3-r3

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: cadvisor, buildah-fips, k8s-device-plugin, podman-fips, k8s-device-plugin-fips, sriov-network-device-plugin-fips, sriov-network-device-plugin, nvidia-container-toolkit-fips, falco-no-driver, nvidia-container-toolkit, prometheus-podman-exporter,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: cadvisor, buildah-fips, k8s-device-plugin, podman-fips, k8s-device-plugin-fips, sriov-network-device-plugin-fips, sriov-network-device-plugin, nvidia-container-toolkit-fips, falco-no-driver, nvidia-container-toolkit, prometheus-podman-exporter,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: buildah, nvidia-container-toolkit, sriov-network-device-plugin, k8s-device-plugin, podman, falco-no-driver, node-feature-discovery, cadvisor...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: buildah, nvidia-container-toolkit, sriov-network-device-plugin, k8s-device-plugin, podman, falco-no-driver, node-feature-discovery, cadvisor...

CLEANSTART-2026-QA91937 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-r6j8-c6r2-37rr applied in versions: 0.18.3-r1, 0.18.3-r2

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: spire-server, cloud-provider-azure, vault-fips, trivy-fips, secrets-store-csi-driver-provider-gcp-fips, kube-arangodb-fips, loki-fips, longhorn-manager, kapp-controller-fips, prometheus-adapter-fips, prometheus-mongodb-exporter-fips, jobset-fips, kyverno, beats,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: k3s, buildah, nvidia-container-toolkit, sriov-network-device-plugin, podman, kubernetes, falco-no-driver, node-feature-discovery, grafana-alloy...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: k3s, buildah, nvidia-container-toolkit, sriov-network-device-plugin, podman, kubernetes, falco-no-driver, node-feature-discovery, grafana-alloy...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: k3s, buildah, nvidia-container-toolkit, sriov-network-device-plugin, podman, kubernetes, falco-no-driver, node-feature-discovery, grafana-alloy...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: k3s, buildah, nvidia-container-toolkit, sriov-network-device-plugin, podman, kubernetes, falco-no-driver, node-feature-discovery, grafana-alloy...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: zarf, nvidia-container-toolkit, wolfictl, neuvector-scanner, kots, grype, k8s-device-plugin, podman, skopeo, osv-scanner, ctop, buildah, kubescape, kubernetes-csi-driver-nfs, trivy, trivy-operator, nerdctl, spegel, undock, containerd, skaffold, k3s, kubescape-operato...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: trivy-fips, trivy-operator, cni-plugins-fips, spegel-fips, skopeo, virt-launcher, azure-container-networking, zarf, checksec, google-osconfig-agent, nvidia-container-toolkit, ctop, wolfictl, node-feature-discovery, trivy, containerd, cluster-autoscaler,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, sriov-network-device-plugin-fips, virt-handler-fips, sriov-network-device-plugin, virt-launcher, grafana-alloy, rke2-runtime, azure-container-networking, ctop-fips, virt-handler, falco-no-driver, nvidia-container-toolkit, prometheus-podman-exporter,...