GO-2025-3547 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, longhorn-manager-fips, azurefile-csi, harvester, rancher-system-agent, harvester-fips, longhorn-share-manager, azurefile-csi-fips, azuredisk-csi, longhorn-share-manager-fips, eks-distro, argo-cd-fips, longhorn-manager, rke2-runtime-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, loki-fips, descheduler, spicedb-operator, cloudflared-fips, azure-workload-identity-webhook, headlamp-fips, argocd-image-updater, kubevela-fips, k8sgateway, dagdotdev, cluster-api-gcp-controller, vcluster, verticadb-operator-fips...

CVE-2025-13281 vulnerabilities

Vulnerabilities for packages: rancher-agent, yunikorn-k8shim, blob-csi, kubernetes-csi-driver-nfs, kubernetes-csi-driver-hostpath, node-feature-discovery, mesosphere-vsphere-csi, kubernetes, nodetaint, vcluster, local-static-provisioner, calico, emissary, rancher-system-agent,...

GHSA-R6J8-C6R2-37RR vulnerabilities

Vulnerabilities for packages: rancher-agent, yunikorn-k8shim, blob-csi, kubernetes-csi-driver-nfs, kubernetes-csi-driver-hostpath, node-feature-discovery, mesosphere-vsphere-csi, kubernetes, nodetaint, vcluster, local-static-provisioner, calico, emissary, rancher-system-agent,...

CVE-2025-13281 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, eks-distro-fips, node-feature-discovery, eks-distro, argo-cd-fips, longhorn-manager, emissary, longhorn-manager-fips, kapp-fips, local-static-provisioner-fips, volcano, aws-efs-csi-driver-fips, kubernetes-dns-node-cache-fips, cephcsi,...

GHSA-R6J8-C6R2-37RR vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, eks-distro-fips, node-feature-discovery, eks-distro, argo-cd-fips, longhorn-manager, emissary, longhorn-manager-fips, kapp-fips, local-static-provisioner-fips, volcano, aws-efs-csi-driver-fips, kubernetes-dns-node-cache-fips, cephcsi,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter-fips, karpenter, karpenter-fips, container-object-storage-interface, gostatsd, terraform-provider-sendgrid-fips, bank-vaults, kubeflow-katib, blob-csi-fips, dagdotdev, pvc-autoresizer, prometheus-bind-exporter, karma-fips,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter-fips, karpenter, karpenter-fips, container-object-storage-interface, gostatsd, terraform-provider-sendgrid-fips, bank-vaults, kubeflow-katib, blob-csi-fips, dagdotdev, pvc-autoresizer, prometheus-bind-exporter, karma-fips,...

GHSA-HJ2P-8WJ8-PFQ4 vulnerabilities

Vulnerabilities for packages: emissary, rancher-fleet, rancher-system-agent, yunikorn-k8shim, kubernetes-csi-driver-hostpath, cloud-provider-gcp-cloud-controller-manager, mesosphere-vsphere-csi, docker-machine-driver-harvester, vcluster...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, boring-registry, aws-privateca-issuer, sftpgo-plugin-auth, dex, kube-metrics-adapter, tekton-chains, flux-notification-controller, weaviate, seaweedfs, tfsec, k8sgpt, newrelic-nri-statsd, logstash-exporter, victoriametrics-cluster, flux, bom,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, boring-registry, aws-privateca-issuer, sftpgo-plugin-auth, dex, kube-metrics-adapter, flux-notification-controller, tfsec, k8sgpt, newrelic-nri-statsd, bazelisk, flux, bom, minify, petname, prometheus-alertmanager, kapp-controller,...

CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, boring-registry, aws-privateca-issuer, sftpgo-plugin-auth, dex, kube-metrics-adapter, tekton-chains, flux-notification-controller, weaviate, seaweedfs, tfsec, k8sgpt, newrelic-nri-statsd, logstash-exporter, victoriametrics-cluster, flux, bom,...