GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, kwok, metallb, opentelemetry-operator, cilium, tekton-chains, k3s, hubble, kube-state-metrics, kubescape-operator, openfga, kuma, spqr, kubescape, k8ssandra-client, cluster-api-ipam-provider-in-cluster, fluent-operator, zo...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, yunikorn-k8shim, docker-machine-driver-harvester, emissary, vcluster, kubernetes-csi-driver-hostpath, rancher-system-agent, mesosphere-vsphere-csi, rancher-fleet...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: fulcio, cloud-provider-gcp-cloud-controller-manager, docker-cli-buildx, gobump, argo-events, buildkitd, lazydocker, aws-application-networking-k8s, clickhouse-operator, kubernetes-csi-driver-hostpath, mongo-tools, nri-f5, pluto, portieris, nginx-prometheus-exporter,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, kwok, metallb, opentelemetry-operator, cilium, tekton-chains, k3s, hubble, kube-state-metrics, kubescape-operator, openfga, kuma, spqr, kubescape, k8ssandra-client, cluster-api-ipam-provider-in-cluster, fluent-operator, zo...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: wave-fips, verticadb-operator, sonobuoy, datadog-agent-fips, volsync, dfc, controller-gen, kube-rbac-proxy-fips, gcp-compute-persistent-disk-csi-driver, victoriametrics-operator-fips, cadence, kafkaexporter-fips, rancher-webhook, redis-operator,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: volsync, fq, velero-plugin-for-aws, rancher-fleet, bazelisk, k8s-driver-manager, thanos-operator, gostatsd, dcgm-exporter, dcgm-exporter-fips, knative-operator, mods, apache-beam-python-3.12-sdk, temporal, terraform-provider-azuread-fips,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...