GO-2025-3547 vulnerabilities

Vulnerabilities for packages: longhorn-share-manager, cluster-autoscaler-fips, longhorn-share-manager-fips, azuredisk-csi, kubernetes-csi-driver-hostpath, azurefile-csi-fips, harvester, longhorn-manager-fips, rke2-runtime-fips, harvester-fips, longhorn-manager, rancher-system-agent, azurefile-csi...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, aws-efs-csi-driver, nodetaint, aws-ebs-csi-driver, rancher-webhook-fips, kubeflow-pipelines, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, spark-operator, ip-masq-agent, rancher-webhook, argocd-image-updater-fips, kubernetes,...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: gomplate, kube-rbac-proxy, tflint, vcluster, grafana-agent-operator, kots, step, trivy, zot, certificate-transparency, spire-server, zarf, cert-manager-cmctl, hubble-ui, spicedb, restic, ferretdb, temporal, minio, sops, spegel, kwok, sigstore-scaffolding, melange,...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, local-static-provisioner, nodetaint, aws-efs-csi-driver, k8s-device-plugin, kubernetes-dns-node-cache, ip-masq-agent, kubernetes-csi-driver-hostpath, spark-operator, argocd-image-updater, cri-tools...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: vcluster, emissary, rancher-webhook, yunikorn-k8shim, kubernetes-csi-driver-nfs, rancher-fleet, kubernetes, argo-rollouts, nodetaint, aws-efs-csi-driver, kapp, kubernetes-dns-node-cache, ip-masq-agent, kubernetes-csi-driver-hostpath, spark-operator,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: hivemind, kpt, sonobuoy, certificate-transparency, mesosphere-vsphere-csi, docker, nri-prometheus, runc, incert, minio, cilium, kubernetes-csi-driver-nfs, timestamp-authority, regclient, licenseclassifier, consul-k8s, opencost, kubernetes-dashboard, spqr, ini-file,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, bom, mesosphere-vsphere-csi, spire-controller-manager, crossplane-provider-aws-cloudwatchlogs, dockerize, restic, ferretdb, runc, terraform-provider-time, flux-notification-controller, vale, kubescape-operator, grpcurl, minio, esbuild,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: helm-push, aws-eks-pod-identity-agent, bom, kpt, spire-controller-manager, fzf, timescaledb-tune, kubernetes-csi-driver-nfs, regclient, kubernetes-dashboard, ini-file, spark-operator, undock, kubeflow-katib, yunikorn-k8shim, gobump, dex, cluster-api-azure-controller,...

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

CLEANSTART-2026-OH47925 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: vcluster, emissary, rancher-webhook, yunikorn-k8shim, kubernetes-csi-driver-nfs, rancher-fleet, kubernetes, argo-rollouts, nodetaint, aws-efs-csi-driver, kapp, kubernetes-dns-node-cache, ip-masq-agent, kubernetes-csi-driver-hostpath, spark-operator,...