GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, pulumi-kubernetes-operator, cluster-api, cloud-provider-aws, grafana, kube-vip-cloud-provider, fluent-operator, azure-service-operator, cluster-api-provider-vsphere, kapp-controller, kyverno, kube-state-metrics, tekton-chains, rancher,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-fleet, docker-machine-driver-harvester, vcluster, yunikorn-k8shim, mesosphere-vsphere-csi, cloud-provider-gcp-cloud-controller-manager, rancher-system-agent, emissary...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, nri-haproxy, falcoctl, envconsul, kubecolor, nats-server-config-reloader, tekton-chains, amazon-cloudwatch-agent-operator, timescaledb-tune, cerbos, nri-mysql, mockgen, spire-controller-manager, ratify, spark-operator, mongo-tools,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, pulumi-kubernetes-operator, cluster-api, cloud-provider-aws, grafana, kube-vip-cloud-provider, fluent-operator, azure-service-operator, cluster-api-provider-vsphere, kapp-controller, kyverno, kube-state-metrics, tekton-chains, rancher,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: portieris, gpu-operator-fips, nri-f5-fips, migrate, knative-net-istio-fips, amazon-ssm-agent, falcoctl, kube-fluentd-operator, longhorn-backing-image-manager, metrics-agent, dockerize, neuvector-fips, json-exporter-fips, terraform-provider-databricks-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, migrate, amazon-ssm-agent, howdy-yall, maru, consul, yace, nri-mssql-fips, flux-source-watcher, mongodb-kubernetes-operator-fips, mountpoint-s3-csi-driver, vault-secrets-operator, mcp-grafana-fips, pdfcpu, splunk-otel-collector-fips,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563: Insertion of Sensitive Information into Log File

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

PT-2020-20209

Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to 1.19.3 Description A sensitive information leak occurs via log files in Kubernetes. This issue affects Kubernetes clusters using VSphere as a cloud provider, where the logging level is set to 4 or above, causing...