GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, cluster-api-azure-controller, yunikorn-k8shim, cert-manager, hubble, gitlab-kas, rancher, flux-kustomize-controller, kots, metallb, cloud-provider-azure, flux-helm-controller, cluster-autoscaler, apisix-ingress-controller,...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: emissary, yunikorn-k8shim, vcluster, cloud-provider-gcp-cloud-controller-manager, mesosphere-vsphere-csi, kubernetes-csi-driver-hostpath, rancher-system-agent, rancher-fleet, docker-machine-driver-harvester...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: emissary, cluster-api-azure-controller, buildkitd, aws-otel-collector, grafana-rollout-operator, k8sgpt, containerd, kubernetes-dashboard-api, timescaledb-tune, kubernetes-csi-external-health-monitor, glow, nuclei, gobump, kubernetes-csi-driver-nfs, witness, steampip...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: emissary, cluster-api-azure-controller, yunikorn-k8shim, cert-manager, hubble, gitlab-kas, rancher, flux-kustomize-controller, kots, metallb, cloud-provider-azure, flux-helm-controller, cluster-autoscaler, apisix-ingress-controller,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: eks-distro, kube-arangodb, kserve-modelmesh-serving, crossplane-provider-keycloak-fips, kubevela-fips, aws-flb-firehose, crossplane-provider-aws-cognitoidentity, cue, virt-api, yace, k3d, request-1279-14, seaweedfs-fips, dfc, nri-discovery-kubernetes-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cognitoidentity, prometheus-postgres-exporter, certificate-transparency-fips, gitea, azurefile-csi, k8s-metacollector, cert-manager-openshift-routes-fips, terraform-provider-random-fips, kubernetes-dashboard-web, velero-plugin-for-csi-fips,...

EUVD-2024-1110

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

UBUNTU-CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...

Information Disclosure

github.com/kubernetes/kubernetes is vulnerable to information disclosure. When using using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will are leaked in the cloud controller manager's log...

CVE-2020-8563

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects v1.19.3...