GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kuma, cert-manager, openfga, cluster-api, kubeflow-pipelines, metallb, cert-manager-istio-csr, spqr, cluster-api-aws-controller, argocd-image-updater, tekton-chains, kubernetes-csi-external-snapshotter, grafana, yunikorn-k8shim, cluster-api-provider-vsphere,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: rancher-fleet, rancher-system-agent, vcluster, yunikorn-k8shim, kubernetes-csi-driver-hostpath, docker-machine-driver-harvester, cloud-provider-gcp-cloud-controller-manager, mesosphere-vsphere-csi, emissary...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: docker-cli, nri-f5, nova, trivy, envconsul, yunikorn-k8shim, ko, kuberlr, cluster-api-provider-vsphere, fulcio, kubernetes-dashboard-api, opentofu, kyverno-notation-aws, kubernetes-dashboard, neuvector-sigstore-interface, clickhouse-operator, azure-service-operator,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kuma, cert-manager, openfga, cluster-api, kubeflow-pipelines, metallb, cert-manager-istio-csr, spqr, cluster-api-aws-controller, argocd-image-updater, tekton-chains, kubernetes-csi-external-snapshotter, grafana, yunikorn-k8shim, cluster-api-provider-vsphere,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: json-exporter-fips, crossplane-provider-aws-servicediscovery, kubernetes-csi-driver-nfs, prometheus-fips, kserve-modelmesh-serving, kubernetes-csi-node-driver-registrar-fips, kubevirt-cdi-controller, crossplane-provider-aws-cloudfront-fips, redka,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: percona-xtradb-cluster-operator, kubernetes-csi-node-driver-registrar-fips, runc-fips, nri-consul, jobset-fips, crossplane-provider-family-aws-fips, langfuse-fips, kyverno-policy-reporter-plugins-trivy, monstache, volsync, newrelic-k8s-metadata-injection-fips,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563: Insertion of Sensitive Information into Log File

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

PT-2020-20209

Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to 1.19.3 Description A sensitive information leak occurs via log files in Kubernetes. This issue affects Kubernetes clusters using VSphere as a cloud provider, where the logging level is set to 4 or above, causing...