GO-2026-6610 vulnerabilities

Vulnerabilities for packages: flagger-fips, helm-mapkubeapis, image-factory-fips, flux-kustomize-controller-fips, vault-env, crossplane-provider-azure-resources, k8sgateway-fips, kubevirt-cdi-operator, nrdot-collector, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-ds-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: flagger-fips, helm-mapkubeapis, image-factory-fips, flux-kustomize-controller-fips, vault-env, crossplane-provider-azure-resources, k8sgateway-fips, kubevirt-cdi-operator, nrdot-collector, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-ds-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: flagger-fips, helm-mapkubeapis, image-factory-fips, flux-kustomize-controller-fips, vault-env, crossplane-provider-azure-resources, k8sgateway-fips, kubevirt-cdi-operator, nrdot-collector, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-ds-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: flagger-fips, helm-mapkubeapis, image-factory-fips, flux-kustomize-controller-fips, vault-env, crossplane-provider-azure-resources, k8sgateway-fips, kubevirt-cdi-operator, nrdot-collector, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-ds-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: flagger-fips, helm-mapkubeapis, image-factory-fips, flux-kustomize-controller-fips, vault-env, crossplane-provider-azure-resources, k8sgateway-fips, kubevirt-cdi-operator, nrdot-collector, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-ds-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: flagger-fips, helm-mapkubeapis, image-factory-fips, flux-kustomize-controller-fips, vault-env, crossplane-provider-azure-resources, k8sgateway-fips, kubevirt-cdi-operator, nrdot-collector, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-ds-fips,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, prometheus-operator, kyverno-notation-aws, helm-mapkubeapis, gcsfuse, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, eksctl, external-dns, yunikorn-web,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: spegel, azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, prometheus-operator, kyverno-notation-aws, helm-mapkubeapis, gcsfuse, dapr, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, eksctl, ollama, external-dns...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: spegel, azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, prometheus-operator, kyverno-notation-aws, helm-mapkubeapis, gcsfuse, dapr, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, eksctl, ollama, external-dns...

CLEANSTART-2026-RD37922 Security fix for ghsa-xjvp-4fhw-gc47 applied in: cadvisor 0.56.2-r1, cadvisor 0.57.0-r1, cadvisor 0.57.0-r2, cadvisor 0.60.2-r1, node-feature-discovery 0.18.3-r3

ghsa-xjvp-4fhw-gc47 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: azure-service-operator, opentelemetry-operator, openfga, kyverno-notation-aws, cluster-api-helm-controller, openbao, fluent-operator, datadog-operator, keda, hubble-ui, kapp-controller, cluster-api-azure-controller, external-secrets-operator, rancher-system-agent,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: flagger-fips, helm-mapkubeapis, image-factory-fips, flux-kustomize-controller-fips, vault-env, crossplane-provider-azure-resources, k8sgateway-fips, kubevirt-cdi-operator, nrdot-collector, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-ds-fips,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: kubernetes, grafana-alloy, k3s, k8s-device-plugin, kubernetes-fips, gosu, eks-distro, neuvector-scanner-fips, syft, runc, cadvisor, cadvisor-fips, podman, neuvector-scanner, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, grafana-alloy-fips,...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: k3s, nvidia-container-toolkit, node-feature-discovery, falco-no-driver, sriov-network-device-plugin, podman, grafana-alloy, kubernetes, buildah...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, node-feature-discovery, falco-no-driver, cadvisor, sriov-network-device-plugin, docker-machine-driver-harvester, podman, buildah, k8s-device-plugin...

CLEANSTART-2026-SB38783 Security fixes in node-feature-discovery 0.18.3-r2

Package node-feature-discovery version 0.18.3-r2 fixes 6 vulnerabilities: CVE-2025-68121, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679, CVE-2026-27142...

CLEANSTART-2026-DT88298 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32952, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, ghsa-r6j8-c6r2-37rr, ghsa-xjvp-4fhw-gc47 applied in versions: 0.18.3-r1, 0.18.3-r2, 0.18.3-r3

Multiple security vulnerabilities affect the node-feature-discovery package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin-fips, node-feature-discovery-fips, k8s-device-plugin-fips, docker-machine-driver-harvester, gpu-operator-fips, gpu-operator, rancher, k8s-device-plugin, prometheus-podman-exporter, prometheus-podman-exporter-fips,...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin-fips, node-feature-discovery-fips, k8s-device-plugin-fips, docker-machine-driver-harvester, gpu-operator-fips, gpu-operator, rancher, k8s-device-plugin, prometheus-podman-exporter, prometheus-podman-exporter-fips,...

CVE-2026-41579 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit, node-feature-discovery, falco-no-driver, cadvisor, sriov-network-device-plugin, docker-machine-driver-harvester, podman, buildah, k8s-device-plugin...