GO-2025-3774 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, docker-machine-driver-harvester, rancher-system-agent, mesosphere-vsphere-csi, kubernetes-csi-driver-hostpath, rancher-fleet, emissary, yunikorn-k8shim, vcluster...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: helm-set-status, timescaledb-tune, kubernetes-dashboard-api, dgraph, envconsul, chart-testing, helm-operator, kubernetes-csi-external-health-monitor, controller-gen, guac, terraform-provider-azapi, gobump, wgcf, harbor-cli, k3d, kyverno-notation-aws, nri-nginx,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: keda, crossplane, helm-operator, kubernetes-csi-external-health-monitor, kuma, cluster-api, rancher-webhook, cert-manager-webhook-pdns, k8ssandra-client, openbao, kyverno-notation-aws, fluent-operator, kubernetes-csi-external-attacher, flux-helm-controller,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: rclone-fips, gke-gcloud-auth-plugin, onepassword-operator, goose, gitlab-kas, crossplane-provider-azure-managedidentity, node-problem-detector-fips, virt-api, longhorn-share-manager, jobset-fips, metrics-agent, modelmesh-runtime-adapter, gitaly, flux-operator-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: jobset-fips, prometheus-nats-exporter, flux-operator-fips, amazon-cloudwatch-agent-fips, kubernetes-csi-external-attacher, ucd, chisel, hey, ko, percona-xtradb-cluster-operator, nri-consul-fips, rke2-runtime, victorialogs-fips, thanos-receive-controller-fips,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...