GO-2026-6094 vulnerabilities

Vulnerabilities for packages: zot, kwok, kyverno-notation-aws, kubernetes-csi-external-attacher, crossplane, cluster-api, cluster-api-provider-vsphere, yunikorn-k8shim, k8ssandra-client, descheduler, cloud-provider-gcp-cloud-controller-manager, kube-state-metrics, external-secrets-operator,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, mesosphere-vsphere-csi, vcluster, rancher-system-agent, cloud-provider-gcp-cloud-controller-manager, rancher-fleet, kubernetes-csi-driver-hostpath, emissary, yunikorn-k8shim...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: zot, cni-plugins, clickhouse-operator, ratify, chartmuseum, guac, polaris, spire-controller-manager, undock, kyverno-notation-aws, aws-privateca-issuer, containerd, rabbitmq-default-user-credential-updater, neuvector-sigstore-interface, ko,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: zot, kwok, kyverno-notation-aws, kubernetes-csi-external-attacher, crossplane, cluster-api, cluster-api-provider-vsphere, yunikorn-k8shim, k8ssandra-client, descheduler, cloud-provider-gcp-cloud-controller-manager, kube-state-metrics, external-secrets-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-web-fips, prometheus-stackdriver-exporter, cephcsi-fips, clickhouse-operator, aws-iam-authenticator-fips, step-fips, apisix-ingress-controller, tekton-pipelines-fips, gatekeeper, langfuse-fips, crossplane-aws-provider-fips, hubble-fips, nsc,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-web-fips, terraform-ls, grafana, prometheus-postgres-exporter-fips, kubernetes-dashboard-fips, cert-manager-csi-driver-fips, kyverno-policy-reporter-kyverno-plugin-fips, trust-manager, rke2-runtime-fips, crossplane-function-environment-configs,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...