GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: task, velero-plugin-for-aws, cadvisor, aws-flb-firehose, newrelic-infrastructure-agent, harbor-scanner-trivy, wave, go-md2man, tkn, spqr, vt-cli, oras, k8sgpt, shfmt, up, fulcio, rootlesskit, volume-modifier-for-k8s, glab, grafana-mimir, helm-push, cfssl,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kpt, pulumi-language-java, task, supercronic, cni-plugins, cadvisor, aws-flb-firehose, pulumi, timoni, kor, grype, metrics-server, newrelic-infrastructure-agent, nri-haproxy, go-md2man, dynamic-localpv-provisioner, regclient, vt-cli, oras, k8sgpt, shfmt, up, nri-ngin...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: traefik, task, velero-plugin-for-aws, cadvisor, aws-flb-firehose, crossplane-provider-aws-firehose, newrelic-infrastructure-agent, harbor-scanner-trivy, wave, go-md2man, tkn, spqr, oras, k8sgpt, shfmt, fulcio, rootlesskit, volume-modifier-for-k8s, glab, grafana-mimir...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kpt, pulumi-language-java, task, supercronic, cni-plugins, cadvisor, aws-flb-firehose, pulumi, timoni, kor, grype, metrics-server, newrelic-infrastructure-agent, nri-haproxy, go-md2man, dynamic-localpv-provisioner, regclient, vt-cli, oras, k8sgpt, shfmt, up, nri-ngin...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: go-bindata, govulncheck, k8ssandra-operator-fips, logstash-exporter, temporal-server, timoni, cadvisor, helm-operator, runc, protoc-gen-go-grpc, kube-state-metrics-fips, go-licenses, kwok, secrets-store-csi-driver-provider-aws, nri-mysql, smarter-device-manager-fips,...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: temporal-server, cosign-fips, runc, helm-operator, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, grafana-rollout-operator-fips, harbor-registry, cert-manager-cmctl, etcd-fips, trillian-fips, controller-gen, rancher-loglevel, kbld, tekton-chains-fips,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: nodetaint, emissary, vcluster, kubernetes, kubernetes-csi-driver-hostpath, rancher-fleet, kubernetes-csi-driver-nfs, local-static-provisioner, aws-efs-csi-driver, ip-masq-agent, kubernetes-dns-node-cache, spark-operator, argocd-image-updater, kapp, yunikorn-k8shim,...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: traefik, task, velero-plugin-for-aws, cadvisor, aws-flb-firehose, crossplane-provider-aws-firehose, newrelic-infrastructure-agent, harbor-scanner-trivy, wave, go-md2man, tkn, spqr, oras, k8sgpt, shfmt, fulcio, rootlesskit, volume-modifier-for-k8s, glab, grafana-mimir...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, k8s-device-plugin, rancher-webhook-fips, argocd-image-updater-fips, nodetaint, argocd-image-updater, local-static-provisioner, kubeflow-pipelines, kubernetes-dns-node-cache, rancher-webhook, local-static-provisioner-fips, ip-masq-agent,...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, argocd-image-updater, aws-efs-csi-driver, argocd-image-updater-fips...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, argocd-image-updater, aws-efs-csi-driver, argocd-image-updater-fips...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

CVE-2022-45157

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

CVE-2022-45157

CVE-2022-45157 affects Rancher where vSphere CPI/CSI credentials used to deploy clusters are stored in plaintext within Rancher. This leads to HIGH impact on confidentiality and integrity for vSphere environments (passwords stored insecurely in a Rancher object). CVSS data in the initial document...

CVE-2022-45157 Exposure of vSphere's CPI and CSI credentials in Rancher

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

CVE-2022-45157 Exposure of vSphere's CPI and CSI credentials in Rancher

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

CVE-2022-45157

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

CVE-2022-45157: Insufficiently Protected Credentials

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...