GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, fluent-operator, cloud-provider-azure, cluster-api-helm-controller, metrics-server, kubernetes-csi-external-attacher, gatekeeper, tkn, argocd-image-updater, metallb, cloud-provider-gcp-cloud-controller-manager, k8ssandra-client...

GO-2025-3522 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...

GO-2024-3281 vulnerabilities

Vulnerabilities for packages: rancher-agent...

GO-2025-3648 vulnerabilities

Vulnerabilities for packages: harvester, rancher-agent, rancher, harvester-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-push, oras-fips, kubescape-operator, cloudbeat, falcoctl, gitlab-operator, gogatekeeper, consul-k8s-fips, kyverno-notation-aws, ocm-cli-fips, ocm-kubernetes-controller, oras, kyverno-fips, kyverno-notation-aws-fips, argocd-image-updater, jfrog-cli,...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: zarf, kube-mgmt-fips, opa, kubescape-server, grafana-operator-fips, conftest-fips, kube-mgmt, helm-diff, oras-fips, rancher, kubescape-operator, consul-k8s, ratify, cloudbeat, falcoctl, opa-fips-envoy, falcoctl-fips, headlamp, opa-fips, gogatekeeper, k8ssandra-client...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: kapp, kubernetes-dns-node-cache, spark-operator-fips, aws-efs-csi-driver, aws-efs-csi-driver-fips, calico-fips, rancher-fleet, ip-masq-agent, spark-operator, yunikorn-k8shim-fips, rancher-webhook, azuredisk-csi, azuredisk-csi-fips, cluster-autoscaler, argo-cd,...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: azure-service-operator, rancher, rancher-agent...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: pulumi, promxy, kubevela, k3s, rancher-agent, amazon-cloudwatch-agent-operator...

CLEANSTART-2026-IO40570 Security fixes in rancher-agent 2.13.1-r0

Package rancher-agent version 2.13.1-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, fluent-operator, cloud-provider-azure, cluster-api-helm-controller, metrics-server, kubernetes-csi-external-attacher, gatekeeper, tkn, argocd-image-updater, metallb, cloud-provider-gcp-cloud-controller-manager, k8ssandra-client...

CLEANSTART-2026-NM99858 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LM78105 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DW47642 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JW55828 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0

Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2023-32198 vulnerabilities

Vulnerabilities for packages: harvester, rancher-agent, rancher, harvester-fips...

GHSA-95FC-G4GJ-MQMX vulnerabilities

Vulnerabilities for packages: harvester, rancher-agent, rancher, harvester-fips...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: reports-server, knative-kafka-broker, k3s, cloudbeat, commercial-expanso-edge, external-dns, keda-fips, frankenphp-8.3, gitlab-kas, terraform, chisel-fips, external-secrets-operator-fips, grafana, etcd-fips, kyverno-fips, argocd-image-updater, flux-source-controller,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: knative-serving, minio, cert-manager, nerdctl, kaf, kyverno, flux, mattermost, opentelemetry-collector, prometheus, cloud-provider-aws, zot, kubescape, spire-server, gitlab-kas, telegraf, cilium-cli, rancher, aactl, loki, snyk-cli, cilium, k3s, trivy-operator, fscryp...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: knative-serving, minio, cert-manager, nerdctl, kaf, kyverno, flux, mattermost, opentelemetry-collector, prometheus, cloud-provider-aws, zot, spire-server, gitlab-kas, telegraf, cilium-cli, rancher, aactl, loki, snyk-cli, cilium, k3s, fscrypt, helm, podman,...