GO-2026-5882 vulnerabilities

Vulnerabilities for packages: ocm-kubernetes-controller-fips, vcluster, xeol-fips, kubescape-operator-fips, helm-operator, cilium-cli, cloudbeat-fips, kube-arangodb-fips, conftest-fips, drone, helm-exporter, falcoctl, ratify-fips, argo-cd, helm-mapkubeapis, ocm-cli, tw, rancher-helm, k9s-fips,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: gatekeeper, consul-k8s, rancher-agent, zot, consul-k8s-fips, kots, zarf-fips, crossplane, rancher, zarf, oras-fips, gogatekeeper, helm, conftest, kubescape-server-fips, argo-cd-fips, cilium-cli, helmfile, k8ssandra-client-fips, cloudbeat-fips, conftest-fips, teleport...

CLEANSTART-2026-IO40570 Security fixes in rancher-agent 2.13.1-r0

Package rancher-agent version 2.13.1-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, kapp-controller, kube-vip-cloud-provider, cass-operator, rke2-cloud-provider, rancher-webhook, kube-rbac-proxy, kubernetes-csi-external-attacher, zot, metallb, kubernetes-csi-external-resizer, kube-state-metrics, kyverno-notation-aws,...

CLEANSTART-2026-NM99858 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LM78105 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DW47642 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JW55828 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2023-32198 vulnerabilities

Vulnerabilities for packages: harvester-fips, rancher-agent, harvester, rancher...

GHSA-95FC-G4GJ-MQMX vulnerabilities

Vulnerabilities for packages: harvester-fips, rancher-agent, harvester, rancher...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: traefik-fips, cilium, flux-source-controller, commercial-expanso-edge, external-secrets-operator-fips, minio, skaffold, cilium-cli, cloudbeat-fips, flux-fips, knative-kafka-broker, kube-arangodb-fips, kubevela-fips, grafana, spire-server, drone, mattermost-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: rancher, kubernetes-dashboard, fscrypt, skaffold, snyk-cli, flux, trivy, chisel, k3s, prometheus-operator, kubescape, helm, loki, osv-scanner, zot, flux-source-controller, knative-serving, kaf, argocd-image-updater, istio, gitea, trivy-operator,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: rancher, docker-cli-buildx, kubernetes-dashboard, fscrypt, snyk-cli, flux, k3s, prometheus-operator, helm, loki, zot, knative-serving, kaf, istio, buildah, external-dns, spire-server, gitlab-kas, podman, prometheus, nerdctl, opentelemetry-collector, aactl, kyverno,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: dagger, xeol-fips, cg, kubescape-operator-fips, skaffold, helm-operator, cloudbeat-fips, kube-arangodb-fips, kubevela-fips, helm-exporter, buildkitd-fips, helm-fips, helm-mapkubeapis, buildkitd, tw, newrelic-infrastructure-agent, scorecard, neuvector-scanner-fips,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: dagger, xeol-fips, cg, kubescape-operator-fips, skaffold, helm-operator, cloudbeat-fips, kube-arangodb-fips, kubevela-fips, helm-exporter, buildkitd-fips, helm-fips, helm-mapkubeapis, buildkitd, tw, newrelic-infrastructure-agent, scorecard, neuvector-scanner-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-set-status, gatekeeper, rancher, chartmuseum, docker, docker-cli-buildx, kubevela, kubescape-operator, skaffold, spegel, syft, manifest-tool, headlamp, kaniko, steampipe, trivy, tw, k3s, rancher-helm, kubescape, helm-mapkubeapis, helm, rancher-agent, ctop, zot,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: helm-set-status, gatekeeper, rancher, chartmuseum, docker, docker-cli-buildx, kubevela, kubescape-operator, skaffold, spegel, syft, manifest-tool, headlamp, kaniko, steampipe, trivy, tw, k3s, rancher-helm, kubescape, helm-mapkubeapis, helm, rancher-agent, ctop, zot,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: helm-set-status, gatekeeper, rancher, chartmuseum, docker, docker-cli-buildx, kubevela, kubescape-operator, skaffold, spegel, syft, manifest-tool, headlamp, kaniko, steampipe, trivy, tw, k3s, rancher-helm, kubescape, helm-mapkubeapis, helm, rancher-agent, ctop, zot,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: helm-set-status, gatekeeper, rancher, chartmuseum, docker, docker-cli-buildx, kubevela, kubescape-operator, skaffold, spegel, syft, manifest-tool, headlamp, kaniko, steampipe, trivy, tw, k3s, rancher-helm, kubescape, helm-mapkubeapis, helm, rancher-agent, ctop, zot,...

CLEANSTART-2026-OK35650 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the rancher-agent package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...