GO-2025-3547 vulnerabilities

Vulnerabilities for packages: longhorn-share-manager-fips, longhorn-share-manager, rancher-system-agent, rke2-runtime-fips, harvester-fips, cluster-autoscaler-fips, kubernetes-csi-driver-hostpath, eks-distro, argo-cd-fips, longhorn-manager-fips, azurefile-csi, azurefile-csi-fips, harvester,...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argocd-image-updater-fips, rancher-webhook, aws-ebs-csi-driver, kubernetes, nodetaint, kubernetes-csi-driver-hostpath, local-static-provisioner, aws-efs-csi-driver, spark-operator, ip-masq-agent, rancher-webhook-fips, kubernetes-dns-node-cache,...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-system-agent...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: cilium-cli, terragrunt, gomplate, kots, step-ca, k3d, terraform-docs, restic, sops, trivy, sigstore-scaffolding, zot, opentelemetry-collector-contrib, falcosidekick, guac, melange, grpc-health-probe, grafana-mimir, opa, osv-scanner, kargo, k3s, step,...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: spark-operator, kubernetes-csi-driver-hostpath, nodetaint, aws-efs-csi-driver, kubernetes-dns-node-cache, argocd-image-updater, local-static-provisioner, ip-masq-agent, cri-tools, k8s-device-plugin, kubeflow-pipelines...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: spark-operator, kubernetes-csi-driver-hostpath, nodetaint, rancher-webhook, aws-efs-csi-driver, kubernetes-dns-node-cache, rancher-fleet, argocd-image-updater, local-static-provisioner, ip-masq-agent, yunikorn-k8shim, emissary, vcluster, kubernetes,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: metrics-server, kots, harbor-scanner-trivy, sonobuoy, tetragon, cni-plugins, contour, step-issuer, aws-flb-cloudwatch, gostatsd, kube-fluentd-operator, libnvidia-container, datadog-agent, kyverno, mc, cluster-autoscaler, go, vitess, lvm-driver, cert-manager-csi-drive...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, pgpool2exporter, kine, kubernetes-dns-node-cache, verticadb-operator, nginx-prometheus-exporter, kyverno-policy-reporter-kyverno-plugin, docker-machine-driver-linode, nri-haproxy, traefik, esbuild, cloud-provider-vsphere,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, nginx-prometheus-exporter, nri-haproxy, gcsfuse, oauth2-proxy, cloud-provider-vsphere, cni-plugins, libnvidia-container, mongo-tools, dgraph, ip-masq-agent, kube-bench, docker-machine-driver-harvester, mockgen, chartmuseum,...

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, rancher-system-agent...

CLEANSTART-2026-OH47925 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: spark-operator, kubernetes-csi-driver-hostpath, nodetaint, rancher-webhook, aws-efs-csi-driver, kubernetes-dns-node-cache, rancher-fleet, argocd-image-updater, local-static-provisioner, ip-masq-agent, yunikorn-k8shim, emissary, vcluster, kubernetes,...