GO-2025-3774 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, rancher-system-agent, rancher-fleet, cloud-provider-gcp-cloud-controller-manager, emissary, kubernetes-csi-driver-hostpath, mesosphere-vsphere-csi, docker-machine-driver-harvester, vcluster...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, delve, polaris, gcsfuse, rclone, oauth2-proxy, nri-mysql, swagger, kubernetes-csi-external-health-monitor, kapp, rancher-system-upgrade-controller, docker-cli, nginx-prometheus-exporter, terraform-mcp-server, k3s, src, cis-operator, ini-file,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: tetragon, cloud-provider-azure, kyverno, opentelemetry-operator, kubernetes-csi-external-health-monitor, kube-metrics-adapter, k3s, k8ssandra-client, node-feature-discovery, telegraf, rancher-webhook, metrics-server, kubernetes-csi-external-attacher, yunikorn-k8shim,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: k8s-metacollector-fips, flux-source-controller-fips, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, crossplane-provider-aws-ecs-fips, haproxy-ingress-fips, rke2-runtime, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: k8s-metacollector-fips, crossplane-function-environment-configs-fips, rke2-runtime, virt-handler, docker-credential-ecr-login-fips, wave-fips, opentelemetry-operator, amazon-k8s-cni-fips, litestream, syncthing-fips, podinfo-fips, cilium-fips, nri-mysql,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...