github.com/NVIDIA/k8s-device-plugin vulnerabilities (Go)

2 vulnerabilities.

• github.com/NVIDIA/k8s-device-plugin Go NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook CVE-2025-23267 Fix available 8.5 HighJuly 17, 2025
• github.com/NVIDIA/k8s-device-plugin Go NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path CVE-2025-23266 Public exploitFix available 9.0 CriticalJuly 17, 2025