GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, cilium, calico, azure-service-operator, fluent-operator, flux-notification-controller, hubble, kube-rbac-proxy, spicedb, hubble-ui, cloud-provider-gcp-cloud-controller-manager, kyverno, openbao, kube-vip-cloud-provider, kubeflow-pipelines,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: rancher-fleet, vcluster, rancher-system-agent, emissary, cloud-provider-gcp-cloud-controller-manager, kubernetes-csi-driver-hostpath, docker-machine-driver-harvester, yunikorn-k8shim, mesosphere-vsphere-csi...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: mongo-tools, mockgen, witness, cloud-provider-gcp-cloud-controller-manager, kubernetes-csi-driver-nfs, cis-operator, nri-haproxy, rclone, wire-go, cloud-sql-proxy, undock, delve, amazon-cloudwatch-agent-operator, rabbitmq-messaging-topology-operator, k3s,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, cilium, calico, azure-service-operator, fluent-operator, flux-notification-controller, hubble, kube-rbac-proxy, spicedb, hubble-ui, cloud-provider-gcp-cloud-controller-manager, kyverno, openbao, kube-vip-cloud-provider, kubeflow-pipelines,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: spicedb-operator, flagger, flux-source-watcher-fips, dcgm-exporter, supercronic, argocd-image-updater-fips, dockerize-fips, polaris-fips, kube-logging-operator-custom-runner, go-licenses, opentelemetry-operator, gatus, nemo, envoy-ratelimit-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: flagger, dockerize-fips, controller-gen, chisel-fips, scanner-test-golang-vulnerability-fixed, longhorn-engine, terraform-mcp-server, wuzz, nrdot-collector-k8s-fips, flux-notification-controller, kubescape, vault-k8s, http-echo, karpenter-fips, zabbix-agent2,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563: Insertion of Sensitive Information into Log File

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...