github.com/nvidia/nvidia-container-toolkit
Build and run containers leveraging NVIDIA GPUs
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 63
- Cadence
- ~27 days
- Last 12 months
- 16
Reach
- Stars
- 4.5k
Details
- First release
- May 18, 2020
| Version | Released | |
|---|---|---|
v1.20.0
minor
|
v1.20.0
minor
Dependencies (22)
+ 14 more |
|
v1.20.0-rc.1
pre
|
v1.20.0-rc.1
pre
Dependencies (22)
+ 14 more |
|
v1.19.1
patch
|
v1.19.1
patch
Dependencies (21)
+ 13 more |
|
v1.19.0
minor
|
v1.19.0
minor
Dependencies (20)
+ 12 more |
|
v1.19.0-rc.7
pre
|
v1.19.0-rc.7
pre
Dependencies (20)
+ 12 more |
|
v1.19.0-rc.6
pre
|
v1.19.0-rc.6
pre
Dependencies (20)
+ 12 more |
|
v1.19.0-rc.5
pre
|
v1.19.0-rc.5
pre
Dependencies (20)
+ 12 more |
|
v1.19.0-rc.4
pre
|
v1.19.0-rc.4
pre
Dependencies (20)
+ 12 more |
|
v1.19.0-rc.3
pre
|
v1.19.0-rc.3
pre
Dependencies (19)
+ 11 more |
|
v1.19.0-rc.2
pre
|
v1.19.0-rc.2
pre
Dependencies (19)
+ 11 more |
|
v1.18.2
patch
|
v1.18.2
patch
Dependencies (16)
+ 8 more |
|
v1.19.0-rc.1
pre
|
v1.19.0-rc.1
pre
Dependencies (18)
+ 10 more |
|
v1.18.1
patch
|
v1.18.1
patch
Dependencies (16)
+ 8 more |
|
v1.18.0
minor
|
v1.18.0
minor
Dependencies (16)
+ 8 more |
|
v1.18.0-rc.6
pre
|
v1.18.0-rc.6
pre
Dependencies (16)
+ 8 more |
|
v1.17.9
patch
|
v1.17.9
patch
Dependencies (16)
+ 8 more |
|
v1.18.0-rc.5
pre
|
v1.18.0-rc.5
pre
Dependencies (16)
+ 8 more |
|
v1.18.0-rc.4
pre
|
v1.18.0-rc.4
pre
Dependencies (16)
+ 8 more |
|
v1.18.0-rc.3
pre
|
v1.18.0-rc.3
pre
Dependencies (16)
+ 8 more |
|
v1.18.0-rc.2
pre
|
v1.18.0-rc.2
pre
Dependencies (16)
+ 8 more |
|
v1.18.0-rc.1
pre
|
v1.18.0-rc.1
pre
Dependencies (15)
+ 7 more |
|
v1.17.8
patch
|
v1.17.8
patch
Dependencies (16)
+ 8 more |
|
v1.17.6
patch
2 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.17.6
patch
Dependencies (14)
+ 6 more |
|
v1.17.5-rc.1
pre
2 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.17.5-rc.1
pre
Dependencies (14)
+ 6 more |
|
v1.17.3
patch
2 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.17.3
patch
Dependencies (13)
+ 5 more |
|
v1.17.1
minor
2 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.17.1
minor
Dependencies (13)
+ 5 more |
|
v1.17.0-rc.2
pre
2 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.17.0-rc.2
pre
Dependencies (12)
+ 4 more |
|
v1.17.0-rc.1
pre
2 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev |
v1.17.0-rc.1
pre
Dependencies (12)
+ 4 more |
|
v1.16.0
minor
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.16.0
minor
Dependencies (12)
+ 4 more |
|
v1.16.0-rc.2
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.16.0-rc.2
pre
Dependencies (12)
+ 4 more |
|
v1.15.0
minor
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.15.0
minor
Dependencies (12)
+ 4 more |
|
v1.15.0-rc.4
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.15.0-rc.4
pre
Dependencies (12)
+ 4 more |
|
v1.15.0-rc.3
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.15.0-rc.3
pre
Dependencies (12)
+ 4 more |
|
v1.15.0-rc.2
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.15.0-rc.2
pre
Dependencies (12)
+ 4 more |
|
v1.15.0-rc.1
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.15.0-rc.1
pre
Dependencies (12)
+ 4 more |
|
v1.14.3
patch
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.14.3
patch
Dependencies (11)
+ 3 more |
|
v1.14.2
minor
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.14.2
minor
Dependencies (11)
+ 3 more |
|
v1.13.5
patch
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.5
patch
Dependencies (12)
+ 4 more |
|
v1.13.4
patch
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.4
patch
Dependencies (12)
+ 4 more |
|
v1.13.2
patch
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.2
patch
Dependencies (12)
+ 4 more |
|
v1.13.0
minor
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.0
minor
Dependencies (13)
+ 5 more |
|
v1.13.0-rc.3
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.13.0-rc.3
pre
Dependencies (13)
+ 5 more |
|
v1.12.0-rc.4
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.12.0-rc.4
pre
Dependencies (13)
+ 5 more |
|
v1.12.0-rc.3
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.12.0-rc.3
pre
Dependencies (13)
+ 5 more |
|
v1.12.0-rc.2
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.12.0-rc.2
pre
Dependencies (13)
+ 5 more |
|
v1.11.0
minor
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.11.0
minor
Dependencies (12)
+ 4 more |
|
v1.11.0-rc.3
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.11.0-rc.3
pre
Dependencies (12)
+ 4 more |
|
v1.11.0-rc.2
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.11.0-rc.2
pre
Dependencies (12)
+ 4 more |
|
v1.11.0-rc.1
pre
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.11.0-rc.1
pre
Dependencies (12)
+ 4 more |
|
v1.10.0
minor
4 CVEs
CVE-2025-23267
GO-2025-3998
GHSA-67jc-hmvg-q4c7
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-23266
GO-2025-3992
GHSA-vmg3-7v43-9g23
Oct 23, 2025
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/NVIDIA/gpu-operator before v25.3.2. Fixed in
1.17.8
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0133
GO-2024-3237
GHSA-f748-7hpg-88ch
Nov 04, 2024
NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2024-0132
GO-2024-3239
GHSA-mjjw-553x-87pq
Nov 04, 2024
NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit Fixed in
1.16.2
References
Updated Feb 04, 2026 · Source: OSV.dev |
v1.10.0
minor
Dependencies (12)
+ 4 more |