CVE-2023-32198 vulnerabilities

Vulnerabilities for packages: rancher-agent, harvester-fips, rancher, harvester...

GHSA-95FC-G4GJ-MQMX vulnerabilities

Vulnerabilities for packages: rancher-agent, harvester-fips, rancher, harvester...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kuma, kots, flux-source-controller, argo-workflows-fips, knative-kafka-broker, argo-workflows, trivy-operator, coder-fips, omnictl-multiarch-fips, flux-source-controller-fips, gitlab-workhorse-ce-fips, telegraf, chisel-fips, flux, trivy-operator-fips, cloudbeat-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: spire-server, gitlab-kas, osv-scanner, zarf, minio, opentelemetry-collector, nerdctl, zot, external-dns, k9s, argocd-image-updater, loki, kaf, rancher, telegraf, helm, flux-source-controller, trivy, trivy-operator, fscrypt, kots, flux, prometheus, gitea, skaffold,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: spire-server, gitlab-kas, minio, opentelemetry-collector, nerdctl, buildah, zot, external-dns, loki, kaf, rancher, docker-cli-buildx, telegraf, helm, fscrypt, kots, flux, prometheus, cilium, kubernetes, snyk-cli, knative-serving, mattermost, containerd,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kubescape-operator, kots, wolfictl, rancher-helm, trivy-operator, syft-fips, grype, neuvector-fips, kaniko-fips, docker-compose, cluster-api-helm-controller-fips, scorecard, envoy-gateway, trivy-operator-fips, cloudbeat-fips, chainctl,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: kubescape-operator, kots, wolfictl, rancher-helm, trivy-operator, syft-fips, grype, neuvector-fips, kaniko-fips, docker-compose, cluster-api-helm-controller-fips, scorecard, envoy-gateway, trivy-operator-fips, cloudbeat-fips, chainctl,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: docker, newrelic-infrastructure-agent, rancher-agent, teleport, tigera-operator, zarf, manifest-tool, buildkitd, tw, envoy-gateway, kubescape-operator, zot, fuse-overlayfs-snapshotter, gatekeeper, k9s, cluster-api-helm-controller, xeol, rancher, docker-cli-buildx,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: docker, newrelic-infrastructure-agent, rancher-agent, teleport, tigera-operator, zarf, manifest-tool, buildkitd, tw, envoy-gateway, kubescape-operator, zot, fuse-overlayfs-snapshotter, gatekeeper, k9s, cluster-api-helm-controller, xeol, rancher, docker-cli-buildx,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: docker, newrelic-infrastructure-agent, rancher-agent, teleport, tigera-operator, zarf, manifest-tool, buildkitd, tw, envoy-gateway, kubescape-operator, zot, fuse-overlayfs-snapshotter, gatekeeper, k9s, cluster-api-helm-controller, xeol, rancher, docker-cli-buildx,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker, newrelic-infrastructure-agent, rancher-agent, teleport, tigera-operator, zarf, manifest-tool, buildkitd, tw, envoy-gateway, kubescape-operator, zot, fuse-overlayfs-snapshotter, gatekeeper, k9s, cluster-api-helm-controller, xeol, rancher, docker-cli-buildx,...

CLEANSTART-2026-OK35650 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the rancher-agent package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: rancher, rancher-agent, azure-service-operator...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: rancher, rancher-agent, azure-service-operator...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: azure-service-operator-fips, rancher, authentik, authentik-fips, azure-service-operator, cloudbeat-fips, rancher-agent, vault, cloudbeat, vault-fips...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: azure-service-operator-fips, rancher, authentik, authentik-fips, azure-service-operator, cloudbeat-fips, rancher-agent, vault, cloudbeat, vault-fips...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: falcoctl, rancher-agent, gitlab-kas, postgres-operator, teleport, tigera-operator, zarf, envoy-gateway, juicefs-csi-driver, terraform-provider-kubernetes, kubernetes-dashboard-api, aws-node-termination-handler, argocd-image-updater, k9s, rancher-fleet, argo-workflows...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: falcoctl, rancher-agent, gitlab-kas, postgres-operator, teleport, tigera-operator, zarf, envoy-gateway, juicefs-csi-driver, terraform-provider-kubernetes, kubernetes-dashboard-api, aws-node-termination-handler, argocd-image-updater, k9s, rancher-fleet, argo-workflows...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: eck-operator-fips, falcoctl-fips, kots, argo-workflows-fips, argo-workflows, gitlab-kas-fips, trivy-operator, argo-rollouts-fips, eks-distro-fips, cloudnative-pg-fips, cert-manager-istio-csr, neuvector-fips, verticadb-operator, percona-server-mongodb-operator,...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: mattermost, gotrue-fips, dex-fips, mattermost-fips, neuvector, rancher, commercial-grafana, rancher-agent, teleport-operator-fips, neuvector-fips, zitadel, dex, omni, omni-fips, gotrue, teleport...