CLEANSTART-2026-QA91937 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-r6j8-c6r2-37rr applied in versions: 0.18.3-r1, 0.18.3-r2

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider-fips, commercial-grafana, tkn-fips, falcoctl, azcopy, descheduler-fips, k9s, kubernetes-csi-external-attacher-fips, sops-fips, buildkitd, longhorn-manager, jobset-fips, flyte, opencost-fips, kubernetes-csi-external-resizer-fips, containerd,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: grafana-alloy, node-feature-discovery, nvidia-container-toolkit, buildah, kubernetes, rancher-agent, sriov-network-device-plugin, podman, falco-no-driver, k3s...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: grafana-alloy, node-feature-discovery, nvidia-container-toolkit, buildah, kubernetes, rancher-agent, sriov-network-device-plugin, podman, falco-no-driver, k3s...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: grafana-alloy, node-feature-discovery, nvidia-container-toolkit, buildah, kubernetes, rancher-agent, sriov-network-device-plugin, podman, falco-no-driver, k3s...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: grafana-alloy, node-feature-discovery, nvidia-container-toolkit, buildah, kubernetes, rancher-agent, sriov-network-device-plugin, podman, falco-no-driver, k3s...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, envoy-gateway, grafana-alloy, grype, newrelic-infrastructure-agent, wolfictl, kubescape-operator, kubernetes, zot, kubescape, zarf, sriov-network-device-plugin, podman, xeol, skopeo, dagger, k8s-device-plugin, mesosphere-vsphere-csi,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: skopeo-fips, neuvector-scanner-fips, envoy-gateway, k9s, cluster-autoscaler, kots, prometheus-node-exporter, grype-fips, node-feature-discovery, mesosphere-vsphere-csi, cni-plugins-fips, neuvector, falco-no-driver, zarf, kubernetes-csi-driver-nfs-fips,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, eks-distro, cluster-autoscaler, cluster-autoscaler-fips, nvidia-container-toolkit, node-feature-discovery, prometheus-podman-exporter, rancher-agent, rancher, buildah, kubernetes, eks-distro-fips, rke2-runtime, falco-no-driver,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, eks-distro, cluster-autoscaler, cluster-autoscaler-fips, nvidia-container-toolkit, node-feature-discovery, prometheus-podman-exporter, rancher-agent, rancher, buildah, kubernetes, eks-distro-fips, rke2-runtime, falco-no-driver,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, eks-distro, cluster-autoscaler, cluster-autoscaler-fips, nvidia-container-toolkit, node-feature-discovery, prometheus-podman-exporter, rancher-agent, rancher, buildah, kubernetes, eks-distro-fips, virt-handler-fips, rke2-runtime,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, eks-distro, cluster-autoscaler, cluster-autoscaler-fips, nvidia-container-toolkit, node-feature-discovery, prometheus-podman-exporter, rancher-agent, rancher, buildah, kubernetes, eks-distro-fips, virt-handler-fips, rke2-runtime,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: skopeo-fips, neuvector-scanner-fips, envoy-gateway, k9s, cluster-autoscaler, kots, prometheus-node-exporter, grype-fips, node-feature-discovery, mesosphere-vsphere-csi, cni-plugins-fips, neuvector, falco-no-driver, zarf, kubernetes-csi-driver-nfs-fips,...

GHSA-6V2P-P543-PHR9 vulnerabilities

Vulnerabilities for packages: skopeo-fips, nodetaint, pulumi, tkn-fips, falcoctl, azcopy, crossplane-provider-aws-lambda, descheduler-fips, k9s, kubernetes-csi-external-attacher-fips, sops-fips, rclone, victoriametrics, prometheus-node-exporter, istio-pilot-agent, stern,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: azuredisk-csi, calico, azurefile-csi, kubernetes-csi-driver-hostpath, vcluster, rancher, node-feature-discovery, docker-machine-driver-harvester, blob-csi, argo-cd, yunikorn-k8shim, cluster-autoscaler, cloud-provider-gcp-cloud-controller-manager, rancher-agent,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: blob-csi, rancher-fleet-fips, blob-csi-fips, argo-cd, cluster-autoscaler, azuredisk-csi-fips, cluster-autoscaler-fips, node-feature-discovery, rancher-agent, rancher, docker-machine-driver-harvester, mesosphere-vsphere-csi, azurefile-csi-fips,...

GHSA-JFVP-7X6P-H2PV vulnerabilities

Vulnerabilities for packages: cadvisor, grype, grafana-alloy, ctop, syft, opentelemetry-collector-contrib, buildah, kubernetes, k8s-device-plugin, runc, docker, neuvector-scanner, podman, k3s...

CVE-2024-45310 vulnerabilities

Vulnerabilities for packages: cadvisor, grype, grafana-alloy, ctop, syft, opentelemetry-collector-contrib, buildah, kubernetes, k8s-device-plugin, runc, docker, neuvector-scanner, podman, k3s...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: nodetaint, local-static-provisioner, cluster-autoscaler, aws-ebs-csi-driver, cluster-autoscaler-fips, rancher-webhook, node-feature-discovery, rancher-webhook-fips, kubernetes, kubeflow-pipelines, spark-operator, argocd-image-updater, aws-efs-csi-driver-fips,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: nodetaint, local-static-provisioner, cluster-autoscaler, aws-ebs-csi-driver, cluster-autoscaler-fips, rancher-webhook, node-feature-discovery, rancher-webhook-fips, kubernetes, kubeflow-pipelines, spark-operator, argocd-image-updater, aws-efs-csi-driver-fips,...