CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, cadvisor-fips, buildah, prometheus-podman-exporter-fips, k8s-device-plugin-fips, nvidia-container-toolkit, nvidia-container-toolkit-fips, sriov-network-device-plugin-fips, sriov-network-device-plugin, gpu-operator, podman, cadvisor,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, cadvisor-fips, buildah, prometheus-podman-exporter-fips, k8s-device-plugin-fips, nvidia-container-toolkit, nvidia-container-toolkit-fips, sriov-network-device-plugin-fips, sriov-network-device-plugin, gpu-operator, podman, cadvisor,...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: rancher-agent, k8s-device-plugin, sriov-network-device-plugin, podman, cadvisor, buildah, rancher, nvidia-container-toolkit, node-feature-discovery...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: rancher-agent, k8s-device-plugin, sriov-network-device-plugin, podman, cadvisor, buildah, rancher, nvidia-container-toolkit, node-feature-discovery...

CLEANSTART-2026-QA91937 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-r6j8-c6r2-37rr applied in versions: 0.18.3-r1, 0.18.3-r2

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: k8s-agents-operator, kube-metrics-adapter-fips, cert-manager-webhook-pdns-fips, calico, kubernetes-csi-external-provisioner, k8sgateway, grype-fips, gitlab-cng, flyte, docker-compose-fips, op-geth, ratify-fips, grype, kubescape-server-fips, blob-csi, kapp-controller,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: kubernetes, rancher-agent, sriov-network-device-plugin, falco-no-driver, podman, k3s, grafana-alloy, buildah, nvidia-container-toolkit, node-feature-discovery...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: kubernetes, rancher-agent, sriov-network-device-plugin, falco-no-driver, podman, k3s, grafana-alloy, buildah, nvidia-container-toolkit, node-feature-discovery...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: kubernetes, rancher-agent, sriov-network-device-plugin, falco-no-driver, podman, k3s, grafana-alloy, buildah, nvidia-container-toolkit, node-feature-discovery...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: kubernetes, rancher-agent, sriov-network-device-plugin, falco-no-driver, podman, k3s, grafana-alloy, buildah, nvidia-container-toolkit, node-feature-discovery...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: grype, k8s-device-plugin, rancher-agent, falco-no-driver, checksec, kubernetes-csi-driver-nfs, undock, dagger, envoy-gateway, k3s, kots, nvidia-container-toolkit, node-feature-discovery, datadog-agent, wolfictl, zarf, k9s, xeol, zot, containerd, nerdctl, grafana-allo...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, eks-distro, buildah, cluster-autoscaler, nvidia-container-toolkit, sriov-network-device-plugin-fips, sriov-network-device-plugin, grafana-alloy-fips, eks-distro-fips, cluster-autoscaler-fips, podman, kubernetes-fips, rke2-runtime, k3s,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: trivy-operator, buildah, cluster-autoscaler, spegel-fips, zarf, google-osconfig-agent, skopeo-fips, prometheus-podman-exporter-fips, grype-fips, undock, sriov-network-device-plugin, longhorn-share-manager-fips, nerdctl, grype, chainctl, zot, blob-csi,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, eks-distro, buildah, cluster-autoscaler, nvidia-container-toolkit, sriov-network-device-plugin-fips, sriov-network-device-plugin, grafana-alloy-fips, eks-distro-fips, cluster-autoscaler-fips, podman, kubernetes-fips, rke2-runtime, k3s,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: trivy-operator, buildah, cluster-autoscaler, spegel-fips, zarf, google-osconfig-agent, skopeo-fips, prometheus-podman-exporter-fips, grype-fips, undock, sriov-network-device-plugin, longhorn-share-manager-fips, nerdctl, grype, chainctl, zot, blob-csi,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, eks-distro, buildah, cluster-autoscaler, nvidia-container-toolkit, sriov-network-device-plugin-fips, sriov-network-device-plugin, grafana-alloy-fips, eks-distro-fips, cluster-autoscaler-fips, podman, kubernetes-fips, rke2-runtime, k3s,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, eks-distro, buildah, cluster-autoscaler, nvidia-container-toolkit, sriov-network-device-plugin-fips, sriov-network-device-plugin, grafana-alloy-fips, eks-distro-fips, cluster-autoscaler-fips, podman, kubernetes-fips, rke2-runtime, k3s,...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: agentbeat-fips, cert-manager-webhook-pdns-fips, apko, crossplane-provider-aws, argo-rollouts, gitness, calico, kubernetes-csi-external-provisioner, skopeo-fips, cert-manager-cmctl-fips, cert-manager-istio-csr, grype-fips, crossplane-provider-azure-authorization,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, rancher, blob-csi, docker-machine-driver-harvester, azuredisk-csi, calico, kubernetes-csi-driver-hostpath, rancher-agent, rancher-fleet, vcluster, yunikorn-k8shim, cloud-provider-gcp-cloud-controller-manager, mesosphere-vsphere-csi, argo-cd,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, cluster-autoscaler, calico-fips, azuredisk-csi, calico, blob-csi-fips, azurefile-csi-fips, argo-cd, azurefile-csi, kubernetes-csi-driver-hostpath, longhorn-share-manager-fips, azuredisk-csi-fips, yunikorn-k8shim-fips,...