GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, cert-manager, k3s, datadog-operator, cluster-autoscaler, gitlab-kas, rancher-agent, helm-operator, cluster-api-provider-vsphere, cluster-api-helm-controller, kyverno, spqr, caddy, calico, pulumi-kubernetes-operator,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: vcluster, docker-machine-driver-harvester, rancher-fleet, kubernetes-csi-driver-hostpath, cloud-provider-gcp-cloud-controller-manager, mesosphere-vsphere-csi, emissary, rancher-system-agent, yunikorn-k8shim...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tflint, k3s, cloud-sql-proxy, kubernetes-dashboard, nodetaint, oauth2-proxy, cluster-api-provider-vsphere, caddy, aws-privateca-issuer, pluto, docker-cli-buildx, cluster-api-azure-controller, ip-masq-agent, buildkitd, trivy, wire-go, kubecolor,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, cert-manager, k3s, datadog-operator, cluster-autoscaler, gitlab-kas, rancher-agent, helm-operator, cluster-api-provider-vsphere, cluster-api-helm-controller, kyverno, spqr, caddy, calico, pulumi-kubernetes-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, crossplane-provider-aws-cloudformation-fips, tkn-fips, lvm-driver, act, grpcurl, prometheus-postgres-exporter-fips, stakater-reloader-fips, rancher-helm, knative-eventing-fips, jfrog-cli, jupyterhub-k8s-image-awaiter,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: tkn-fips, lvm-driver, cni-plugins, grpcurl, go-bindata, terraform-provider-pagerduty, kube-logging-operator-custom-runner, prometheus-nats-exporter, goreleaser, newrelic-fluent-bit-output, cilium-envoy, newrelic-infra-operator, commercial-chainloop-cli, wuzz, tkn, he...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563: Insertion of Sensitive Information into Log File

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

PT-2020-20209

Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to 1.19.3 Description A sensitive information leak occurs via log files in Kubernetes. This issue affects Kubernetes clusters using VSphere as a cloud provider, where the logging level is set to 4 or above, causing...