GO-2025-3774 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, vcluster, mesosphere-vsphere-csi, cloud-provider-gcp-cloud-controller-manager, emissary, rancher-system-agent, yunikorn-k8shim, docker-machine-driver-harvester, rancher-fleet...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, nginx-prometheus-exporter, docker-credential-gcr, harbor-registry, kubernetes-csi-driver-hostpath, chartmuseum, grafana-rollout-operator, libnvidia-container, harbor-cli, aws-otel-collector, cloud-sql-proxy, flux, bom, kubernetes-dashboard-auth,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape-operator, calico, node-feature-discovery, kots, flux-kustomize-controller, datadog-agent, kube-state-metrics, telegraf, openfga, keda, spqr, cloud-provider-aws, tekton-pipelines, k3s, flux-helm-controller, kube-rbac-proxy,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: thanos-operator, emissary, newrelic-k8s-metadata-injection-fips, conftest-fips, nova-fips, nri-redis-fips, docker-cli, openbao-k8s-fips, syft, yunikorn-k8shim-fips, redka, paranoia, cyberark-secrets-provider-for-k8s, harbor-fips, k8s-driver-manager-fips, otel-cli,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection-fips, docker-cli, openbao-k8s-fips, syft, k8s-driver-manager-fips, crossplane-provider-azure-managedidentity, falco-exporter, crossplane-provider-kubernetes-fips, quic-go-fips, spqr, kubernetes-csi-node-driver-registrar,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...