GO-2025-4097 vulnerabilities

Vulnerabilities for packages: falco-no-driver, kubernetes, nvidia-container-toolkit, podman, buildah, sriov-network-device-plugin, k3s, node-feature-discovery, grafana-alloy...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: cadvisor, nvidia-container-toolkit, podman, buildah, k8s-device-plugin, sriov-network-device-plugin, node-feature-discovery...

AZL-93318 CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: cadvisor, nvidia-container-toolkit, podman, buildah, k8s-device-plugin, sriov-network-device-plugin, node-feature-discovery...

CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

CVE-2026-42506 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

CVE-2026-42506 affecting package sriov-network-device-plugin for versions less than 3.7.0-6. A patched version of the package is available...

AZL-88308 CVE-2026-27136 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-88302 CVE-2026-42506 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-88290 CVE-2026-39821 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

AZL-88299 CVE-2026-42502 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-88296 CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-88293 CVE-2026-25680 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CVE-2025-58190 affecting package sriov-network-device-plugin for versions less than 3.7.0-5

CVE-2025-58190 affecting package sriov-network-device-plugin for versions less than 3.7.0-5. A patched version of the package is available...

CVE-2025-47911 affecting package sriov-network-device-plugin for versions less than 3.6.2-11

CVE-2025-47911 affecting package sriov-network-device-plugin for versions less than 3.6.2-11. A patched version of the package is available...

Azure Linux 3.0 Security Update: cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device-plugin (CVE-2025-22872)

The version of cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device- plugin installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22872 advisory. - The...

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.7.0-4

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.7.0-4. A patched version of the package is available...

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.6.2-9

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.6.2-9. A patched version of the package is available...

Azure Linux 3.0 Security Update: sriov-network-device-plugin / vitess (CVE-2024-45339)

The version of sriov-network-device-plugin / vitess installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45339 advisory. - When logs are written to a widely-writable directory the default, an...

CBL Mariner 2.0 Security Update: sriov-network-device-plugin / vitess (CVE-2024-45339)

The version of sriov-network-device-plugin / vitess installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45339 advisory. - When logs are written to a widely-writable directory the default, an...

CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.6.2-8

CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.6.2-8. A patched version of the package is available...