GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, cluster-api-gcp-controller, crossplane, cluster-api, kuma, external-secrets-operator, calico, kube-rbac-proxy, grafana, metallb, kubernetes-csi-external-health-monitor, cloud-provider-aws, azure-service-operator, cert-manager-istio-csr,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: emissary, kubernetes-csi-driver-hostpath, yunikorn-k8shim, mesosphere-vsphere-csi, docker-machine-driver-harvester, rancher-fleet, rancher-system-agent, vcluster, cloud-provider-gcp-cloud-controller-manager...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kuberlr, ini-file, docker-machine-driver-harvester, prometheus-operator, caddy, timescaledb-tune, containerd, regclient, zot, nri-mysql, src, grafana-alloy, nri-redis, nri-f5, cluster-api-provider-vsphere, opentofu, rabbitmq-cluster-operator, oauth2-proxy, glow,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, cluster-api-gcp-controller, crossplane, cluster-api, kuma, external-secrets-operator, calico, kube-rbac-proxy, grafana, metallb, kubernetes-csi-external-health-monitor, cloud-provider-aws, azure-service-operator, cert-manager-istio-csr,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: beats-fips, gke-gcloud-auth-plugin, knative-storage-migrate, litmus-chaos-operator, neuvector-dbgen-fips, prometheus-beat-exporter, kyverno-policy-reporter-ui, kubernetes-event-exporter-fips, prometheus-postgres-exporter, crossplane-provider-aws-dynamodb-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, prometheus-postgres-exporter, addon-resizer, k8s-metacollector, crossplane-provider-aws-rds-fips, aws-nuke-fips, nuclei, etcd, newrelic-k8s-metadata-injection-fips, gostatsd, wave, spire-controller-manager, secretgen-controller,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...