GO-2026-6094 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, tekton-chains, k3s, tekton-pipelines, cert-manager-istio-csr, cloud-provider-gcp-cloud-controller-manager, flux-notification-controller, node-feature-discovery, cilium, cluster-api-helm-controller, grafana, rancher-agent,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, emissary, vcluster, mesosphere-vsphere-csi, rancher-fleet, cloud-provider-gcp-cloud-controller-manager, docker-machine-driver-harvester, kubernetes-csi-driver-hostpath, yunikorn-k8shim...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kpt, aws-eks-pod-identity-agent, cloud-provider-gcp-cloud-controller-manager, harbor-registry, kubernetes-dashboard-api, cni-plugins, kor, nri-haproxy, regclient, amazon-cloudwatch-agent-operator, tkn, k8sgpt, fulcio, nri-nginx, kind, guac, cloud-sql-proxy, eksctl,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: rancher-system-agent, tekton-chains, k3s, tekton-pipelines, cert-manager-istio-csr, cloud-provider-gcp-cloud-controller-manager, flux-notification-controller, node-feature-discovery, cilium, cluster-api-helm-controller, grafana, rancher-agent,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, aws-ebs-csi-driver-fips, cilium-envoy, kubevirt-cdi-apiserver, runc, kubernetes-csi-external-attacher, flagger, seaweedfs, vale, migrate, teleport-operator-fips, act, kwok, nri-rabbitmq-fips, rancher-fleet...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: dfc, flagger, teleport-operator-fips, act, nri-rabbitmq-fips, virt-controller-fips, etcd-fips, crossplane-provider-aws-wafv2-fips, podman-fips, step-kms-plugin, crossplane-provider-aws-acm-fips, nerdctl, kapp, gatus, docker-cli, s5cmd-fips, nri-rabbitmq,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563: Insertion of Sensitive Information into Log File

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

PT-2020-20209

Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to 1.19.3 Description A sensitive information leak occurs via log files in Kubernetes. This issue affects Kubernetes clusters using VSphere as a cloud provider, where the logging level is set to 4 or above, causing...