GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, flux-kustomize-controller, apisix-ingress-controller, kube-metrics-adapter, tetragon, cluster-api-helm-controller, tekton-pipelines, cert-manager-istio-csr, calico, cluster-api-provider-vsphere, opentelemetry-operator,...

GO-2025-3522 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...

GO-2024-3281 vulnerabilities

Vulnerabilities for packages: rancher-agent...

GO-2025-3648 vulnerabilities

Vulnerabilities for packages: harvester-fips, rancher-agent, rancher, harvester...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, cloudbeat, cluster-api-helm-controller-fips, drone, zarf-fips, helm-exporter, tigera-operator, helm-push, zarf, gitlab-operator, crossplane-fips, helm-mapkubeapis, kubescape-operator, cert-manager-cmctl, gatekeeper, maru, kots,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: rancher-fleet, kubescape-server-fips, oras, cloudbeat, trivy-fips, opa-fips, consul-k8s, argocd-image-updater, headlamp-fips, helmfile, drone, headlamp, k8ssandra-client, opa, cilium-cli, k8ssandra-client-fips, zarf-fips, cloudbeat-fips, conftest, argo-cd,...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: rancher-fleet, cluster-autoscaler-fips, argo-rollouts, yunikorn-k8shim, spark-operator, yunikorn-k8shim-fips, node-feature-discovery, argocd-image-updater, kubernetes-fips, argo-rollouts-fips, aws-efs-csi-driver, ip-masq-agent, argo-cd, rancher-agent,...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-service-operator, rancher...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: kubevela, k3s, promxy, rancher-agent, pulumi, amazon-cloudwatch-agent-operator...

CLEANSTART-2026-IO40570 Security fixes in rancher-agent 2.13.1-r0

Package rancher-agent version 2.13.1-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, flux-kustomize-controller, apisix-ingress-controller, kube-metrics-adapter, tetragon, cluster-api-helm-controller, tekton-pipelines, cert-manager-istio-csr, calico, cluster-api-provider-vsphere, opentelemetry-operator,...

CLEANSTART-2026-NM99858 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LM78105 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DW47642 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JW55828 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2023-32198 vulnerabilities

Vulnerabilities for packages: harvester-fips, rancher-agent, rancher, harvester...

GHSA-95FC-G4GJ-MQMX vulnerabilities

Vulnerabilities for packages: harvester-fips, rancher-agent, rancher, harvester...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: mattermost, k9s-fips, kubescape-server-fips, cloudbeat, elastic-agent-fips, drone, cert-manager, chisel, commercial-grafana, kubernetes-fips, zarf-fips, tekton-pipelines-fips, tigera-operator, zarf, tekton-pipelines, gatekeeper, vault, gatekeeper-fips, kots, k9s,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: external-dns, fscrypt, knative-serving, trivy, minio, cilium-cli, nerdctl, chisel, flux-image-automation-controller, zarf, spire-server, k3s, prometheus-operator, cilium, flux-source-controller, snyk-cli, flux, helm, kubernetes-dashboard, aactl,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: external-dns, fscrypt, knative-serving, minio, cilium-cli, nerdctl, spire-server, k3s, prometheus-operator, podman, cilium, snyk-cli, flux, helm, kubernetes-dashboard, buildah, aactl, external-secrets-operator, kubernetes, docker-cli-buildx, mattermost, cert-manager,...