HIGH8.5Go
GHSA-67jc-hmvg-q4c7· CVE-2025-23267, GO-2025-3998NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook
Modified: 11/5/2025
package
Go/github.com/NVIDIA/k8s-device-plugin
pkg:go/github.com/NVIDIA/k8s-device-plugin
CRITICAL9.0Go
GHSA-vmg3-7v43-9g23· CVE-2025-23266, GO-2025-3992NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path
Modified: 9/10/2026
—Go
GO-2025-3992· CVE-2025-23266, GHSA-vmg3-7v43-9g23NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator
Modified: 2/4/2026
—Go
GO-2025-3998· CVE-2025-23267, GHSA-67jc-hmvg-q4c7NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator
Modified: 3/3/2026