GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-ipam-provider-in-cluster, spicedb-operator, metrics-server, spicedb, tekton-chains, node-feature-discovery, rancher-agent, k3s, kube-metrics-adapter, kube-rbac-proxy, cass-operator, rancher, openbao, yunikorn-k8shim, kubernetes-csi-external-resizer,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: openfga, spiffe-helper-fips, crossplane-provider-aws-efs, k8s-device-plugin, certificate-transparency, kuma, envconsul, crossplane-provider-aws-budgets-fips, listmonk, argo-events-fips, kubernetes-dashboard-auth-fips, volume-modifier-for-k8s,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: cadvisor, eks-distro, k8s-device-plugin, opentelemetry-collector-contrib-fips, kubernetes, cluster-autoscaler, ctop, opentelemetry-collector-contrib, gosu, neuvector-scanner-fips, eks-distro-fips, grafana-alloy, docker, neuvector, kubernetes-fips, k3s,...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: k3s, falco-no-driver, sriov-network-device-plugin, podman, grafana-alloy, nvidia-container-toolkit, buildah, kubernetes, node-feature-discovery...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cadvisor, podman, nvidia-container-toolkit, buildah, k8s-device-plugin, node-feature-discovery...

CLEANSTART-2026-SB38783 Security fixes in node-feature-discovery 0.18.3-r2

Package node-feature-discovery version 0.18.3-r2 fixes 6 vulnerabilities: CVE-2025-68121, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679, CVE-2026-27142...

CLEANSTART-2026-DT88298 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, ghsa-r6j8-c6r2-37rr, ghsa-xjvp-4fhw-gc47 applied in versions: 0.18.3-r1, 0.18.3-r2, 0.18.3-r3

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, cadvisor, nvidia-container-toolkit-fips, prometheus-podman-exporter, k8s-device-plugin, rancher, rancher-agent, k8s-device-plugin-fips, nvidia-container-toolkit, gpu-operator, node-feature-discovery-fips, prometheus-podman-exporter-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, cadvisor, nvidia-container-toolkit-fips, prometheus-podman-exporter, k8s-device-plugin, rancher, rancher-agent, k8s-device-plugin-fips, nvidia-container-toolkit, gpu-operator, node-feature-discovery-fips, prometheus-podman-exporter-fips,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cadvisor, podman, nvidia-container-toolkit, buildah, k8s-device-plugin, node-feature-discovery...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cadvisor, podman, nvidia-container-toolkit, buildah, k8s-device-plugin, node-feature-discovery...

CLEANSTART-2026-QA91937 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-r6j8-c6r2-37rr applied in versions: 0.18.3-r1, 0.18.3-r2

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kuma, minio-fips, tfsec, jaeger-operator, kiali, cluster-api-helm-controller-fips, falcosidekick-fips, sftpgo, cert-manager-webhook-pdns, metrics-server, datadog-operator-fips, migrate, zitadel, temporal-fips, harbor, telegraf, kubernetes-csi-external-health-monitor,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: k3s, falco-no-driver, sriov-network-device-plugin, podman, grafana-alloy, nvidia-container-toolkit, buildah, kubernetes, node-feature-discovery...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: k3s, falco-no-driver, sriov-network-device-plugin, podman, grafana-alloy, nvidia-container-toolkit, buildah, kubernetes, node-feature-discovery...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: k3s, falco-no-driver, sriov-network-device-plugin, podman, grafana-alloy, nvidia-container-toolkit, buildah, kubernetes, node-feature-discovery...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: k3s, falco-no-driver, sriov-network-device-plugin, podman, grafana-alloy, nvidia-container-toolkit, buildah, kubernetes, node-feature-discovery...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, mesosphere-vsphere-csi, falco-no-driver, syft, kubescape-operator, grype, k9s, k8s-device-plugin, kubernetes, node-feature-discovery, newrelic-infrastructure-agent, k3s, sriov-network-device-plugin, checksec, wolfictl, dagger, podman, osv-scanner,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, eks-distro, rancher, rancher-agent, kubernetes, cluster-autoscaler, nvidia-container-toolkit, virt-handler, eks-distro-fips, grafana-alloy, node-feature-discovery-fips, rke2-runtime, azure-container-networking, kubernetes-fips, k3s,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, k8s-device-plugin, skaffold-fips, nvidia-container-toolkit, volcano-fips, xeol-fips, osv-scanner, newrelic-infrastructure-agent, nerdctl, node-feature-discovery-fips, docker, prometheus-node-exporter, longhorn-share-manager,...