GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, spicedb, kube-rbac-proxy, cloud-provider-gcp-cloud-controller-manager, kube-vip-cloud-provider, cluster-api, kubernetes, flux-helm-controller, metrics-server, cluster-api-azure-controller, zot, tetragon, kubescape, grafana,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: vcluster, emissary, mesosphere-vsphere-csi, rancher-system-agent, docker-machine-driver-harvester, rancher-fleet, kubernetes-csi-driver-hostpath, cloud-provider-gcp-cloud-controller-manager, yunikorn-k8shim...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tempo, cni-plugins, tflint, trivy, lazydocker, cloud-provider-gcp-cloud-controller-manager, ratify, cluster-api-azure-controller, nri-f5, zot, nri-nginx, kapp, ipfs-cluster, k3d, kube-bench, kubernetes-csi-driver-nfs, mockgen, nginx-prometheus-exporter,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, spicedb, kube-rbac-proxy, cloud-provider-gcp-cloud-controller-manager, kube-vip-cloud-provider, cluster-api, kubernetes, flux-helm-controller, metrics-server, cluster-api-azure-controller, zot, tetragon, kubescape, grafana,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, cert-exporter-fips, knative-storage-migrate, addon-resizer, lvm-driver-fips, neuvector, backup-restore-operator, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: cert-exporter-fips, backup-restore-operator, gcp-compute-persistent-disk-csi-driver, tekton-chains-fips, nfs-subdir-external-provisioner-fips, wazero-fips, openbao, volcano-fips, cadence, yace, oras, zot, goose, tigera-operator-fips, kserve-rest-proxy, kpt, wave,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...