GO-2026-6094 vulnerabilities

Vulnerabilities for packages: grafana, rancher, cilium, telegraf, cloud-provider-gcp-cloud-controller-manager, kubernetes-csi-external-snapshotter, tetragon, spqr, kapp-controller, kubescape, kubernetes-csi-external-health-monitor, hubble-ui, kube-metrics-adapter, kuma, external-secrets-operator,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, crossplane-provider-aws-appintegrations, spire-controller-manager-fips, skopeo-fips, jobset-fips, configmap-reload-fips, argo-workflows, longhorn-manager, mcp-grafana, openbao-k8s, pulumi-language-yaml, crossplane-provider-aws-iot-fip...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: neuvector, grafana-alloy-fips, eks-distro, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, neuvector-fips, neuvector-scanner, syft, cadvisor-fips, docker, k8s-device-plugin, runc, eks-distro-fips, cluster-autoscaler, ctop, cadvisor, buildah,...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, falco-no-driver, grafana-alloy, buildah, k3s, sriov-network-device-plugin, kubernetes, podman, node-feature-discovery...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, k8s-device-plugin, buildah, sriov-network-device-plugin, cadvisor, podman, node-feature-discovery...

CLEANSTART-2026-SB38783 Security fixes in node-feature-discovery 0.18.3-r2

Package node-feature-discovery version 0.18.3-r2 fixes 6 vulnerabilities: CVE-2025-68121, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679, CVE-2026-27142...

CLEANSTART-2026-DT88298 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, ghsa-r6j8-c6r2-37rr, ghsa-xjvp-4fhw-gc47 applied in versions: 0.18.3-r1, 0.18.3-r2, 0.18.3-r3

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: rancher-agent, prometheus-podman-exporter-fips, prometheus-podman-exporter, sriov-network-device-plugin-fips, node-feature-discovery-fips, cadvisor-fips, k8s-device-plugin, nvidia-container-toolkit, k8s-device-plugin-fips, podman-fips, gpu-operator-fips, cadvisor,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: rancher-agent, prometheus-podman-exporter-fips, prometheus-podman-exporter, sriov-network-device-plugin-fips, node-feature-discovery-fips, cadvisor-fips, k8s-device-plugin, nvidia-container-toolkit, k8s-device-plugin-fips, podman-fips, gpu-operator-fips, cadvisor,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, k8s-device-plugin, buildah, sriov-network-device-plugin, cadvisor, podman, node-feature-discovery...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, k8s-device-plugin, buildah, sriov-network-device-plugin, cadvisor, podman, node-feature-discovery...

CLEANSTART-2026-QA91937 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-r6j8-c6r2-37rr applied in versions: 0.18.3-r1, 0.18.3-r2

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, envoy-gateway, jobset-fips, argo-workflows, longhorn-manager, cerbos, kube-metrics-adapter, k3d, traefik-fips, ratify, gitlab-rails-ce, kong-ingress-controller, kube-vip-cloud-provider, falcosidekick-fips, trivy, loki, cosign,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, falco-no-driver, grafana-alloy, buildah, k3s, sriov-network-device-plugin, kubernetes, podman, node-feature-discovery...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, falco-no-driver, grafana-alloy, buildah, k3s, sriov-network-device-plugin, kubernetes, podman, node-feature-discovery...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, falco-no-driver, grafana-alloy, buildah, k3s, sriov-network-device-plugin, kubernetes, podman, node-feature-discovery...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, falco-no-driver, grafana-alloy, buildah, k3s, sriov-network-device-plugin, kubernetes, podman, node-feature-discovery...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: xeol, ctop, falco-no-driver, grafana-alloy, kubescape-operator, nerdctl, trivy, docker, grype, mesosphere-vsphere-csi, osv-scanner, syft, containerd, envoy-gateway, k9s, nvidia-container-toolkit, kots, skopeo, neuvector-scanner, zot, undock, k8s-device-plugin, zarf,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: rancher-agent, rke2-runtime, grafana-alloy-fips, eks-distro, virt-handler-fips, azure-container-networking, prometheus-podman-exporter, sriov-network-device-plugin-fips, node-feature-discovery-fips, nvidia-container-toolkit, falco-no-driver, eks-distro-fips,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: envoy-gateway, spegel-fips, grafana-alloy-fips, skopeo-fips, azure-container-networking, prometheus-podman-exporter, docker, trivy, kubernetes-csi-driver-nfs, skaffold-fips, virt-launcher, kubescape, volcano-fips, wolfictl, cluster-autoscaler-fips, zot, xeol,...