GO-2026-6610 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes, cert-manager-csi-driver-fips, crossplane-provider-azure-authorization, crossplane-provider-aws-docdb, crossplane-provider-aws-mediapackage, aws-otel-collector, commercial-gitlab-rails-ee, yunikorn-k8shim, falcosidekick-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes, cert-manager-csi-driver-fips, crossplane-provider-azure-authorization, crossplane-provider-aws-docdb, crossplane-provider-aws-mediapackage, aws-otel-collector, commercial-gitlab-rails-ee, yunikorn-k8shim, falcosidekick-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes, cert-manager-csi-driver-fips, crossplane-provider-azure-authorization, crossplane-provider-aws-docdb, crossplane-provider-aws-mediapackage, aws-otel-collector, commercial-gitlab-rails-ee, yunikorn-k8shim, falcosidekick-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes, cert-manager-csi-driver-fips, crossplane-provider-azure-authorization, crossplane-provider-aws-docdb, crossplane-provider-aws-mediapackage, aws-otel-collector, commercial-gitlab-rails-ee, yunikorn-k8shim, falcosidekick-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes, cert-manager-csi-driver-fips, crossplane-provider-azure-authorization, crossplane-provider-aws-docdb, crossplane-provider-aws-mediapackage, commercial-gitlab-rails-ee, yunikorn-k8shim, falcosidekick-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes, cert-manager-csi-driver-fips, crossplane-provider-azure-authorization, crossplane-provider-aws-docdb, crossplane-provider-aws-mediapackage, aws-otel-collector, commercial-gitlab-rails-ee, yunikorn-k8shim, falcosidekick-fips,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: zot, crossplane-provider-azure-authorization, trivy-operator, steampipe, vault-env, metallb, aws-otel-collector, secrets-store-csi-driver-provider-azure, kube-state-metrics, kube-bench, vcluster, yace, yunikorn-k8shim, glow, local-path-provisioner, helm-operator,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: zot, crossplane-provider-azure-authorization, trivy-operator, steampipe, vault-env, metallb, gh, aws-otel-collector, secrets-store-csi-driver-provider-azure, kube-state-metrics, kube-bench, vcluster, yace, grpc-health-probe, neuvector-scanner, yunikorn-k8shim, glow,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: zot, crossplane-provider-azure-authorization, trivy-operator, steampipe, vault-env, metallb, gh, aws-otel-collector, secrets-store-csi-driver-provider-azure, kube-state-metrics, kube-bench, vcluster, yace, grpc-health-probe, neuvector-scanner, yunikorn-k8shim, glow,...

CLEANSTART-2026-RD37922 Security fix for GHSA-xjvp-4fhw-gc47 applied in: cadvisor 0.56.2-r1, cadvisor 0.57.0-r1, cadvisor 0.57.0-r2, cadvisor 0.60.2-r1, node-feature-discovery 0.18.3-r3

GHSA-xjvp-4fhw-gc47 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: azure-service-operator, calico, descheduler, rancher-agent, rke2-cloud-provider, zot, spqr, kwok, openfga, kyverno-notation-aws, kube-metrics-adapter, tkn, metallb, cluster-api-gcp-controller, cluster-autoscaler, datadog-operator,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver-fips, crossplane-provider-azure-authorization, crossplane-provider-aws-docdb, aws-otel-collector, falcosidekick-fips, aws-flb-kinesis-fips, coredns, local-path-provisioner, pulumi-language-java, crossplane-provider-aws-bedrock, cert-manager,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, cadvisor-fips, eks-distro, cluster-autoscaler, k8s-device-plugin, eks-distro-fips, neuvector-scanner, docker, k3s, buildah, cluster-autoscaler-fips, podman, kubernetes, grafana-alloy, cadvisor, grype, kubernetes-fips,...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, nvidia-container-toolkit, k8s-device-plugin, buildah, cadvisor, docker-machine-driver-harvester, podman, falco-no-driver, node-feature-discovery...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, kubernetes, k3s, grafana-alloy, buildah, nvidia-container-toolkit, podman, falco-no-driver, node-feature-discovery...

CLEANSTART-2026-SB38783 Security fixes in node-feature-discovery 0.18.3-r2

Package node-feature-discovery version 0.18.3-r2 fixes 6 vulnerabilities: CVE-2025-68121, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679, CVE-2026-27142...

CLEANSTART-2026-DT88298 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, ghsa-r6j8-c6r2-37rr, ghsa-xjvp-4fhw-gc47 applied in versions: 0.18.3-r1, 0.18.3-r2, 0.18.3-r3

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, node-feature-discovery-fips, k8s-device-plugin-fips, cadvisor-fips, prometheus-podman-exporter-fips, falco-no-driver, sriov-network-device-plugin, k8s-device-plugin, prometheus-podman-exporter, buildah, podman-fips, podman,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, node-feature-discovery-fips, k8s-device-plugin-fips, cadvisor-fips, prometheus-podman-exporter-fips, falco-no-driver, sriov-network-device-plugin, k8s-device-plugin, prometheus-podman-exporter, buildah, podman-fips, podman,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, nvidia-container-toolkit, k8s-device-plugin, buildah, cadvisor, docker-machine-driver-harvester, podman, falco-no-driver, node-feature-discovery...