GHSA-95FC-G4GJ-MQMX vulnerabilities

Vulnerabilities for packages: rancher, rancher-agent, harvester-fips, harvester...

CVE-2023-32198 vulnerabilities

Vulnerabilities for packages: rancher, rancher-agent, harvester-fips, harvester...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, cloudbeat, reports-server, trivy-operator-fips, nemo, kyverno-fips, argo-cd-fips, frankenphp-8.5, commercial-grafana, coder, cilium-cli, terraform, gitea-fips, minio-fips, harbor, drone, k9s, knative-serving-fips, kubescape-server-fips, chisel-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: chisel, mattermost, skaffold, cert-manager, external-dns, k3s, snyk-cli, fscrypt, zot, argo-cd, kine, osv-scanner, containerd, kubernetes-dashboard, argocd-image-updater, kyverno, kubescape, helm, aactl, knative-serving, trivy, minio, trivy-operator,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: mattermost, cert-manager, external-dns, k3s, snyk-cli, fscrypt, zot, argo-cd, docker-cli-buildx, kine, containerd, kubernetes-dashboard, kyverno, helm, aactl, knative-serving, minio, buildah, spire-server, prometheus, teleport, nerdctl, cilium, podman,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: chartmuseum, gitlab-rails-ce, docker-cli-buildx-fips, cloudbeat, helm-set-status, cluster-api-helm-controller, trivy-operator-fips, chartmuseum-fips, neuvector-scanner-fips, harvester-fips, datadog-agent-fips, harvester, chainctl-fips, kgateway-fips, scorecard,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: chartmuseum, gitlab-rails-ce, docker-cli-buildx-fips, cloudbeat, helm-set-status, cluster-api-helm-controller, trivy-operator-fips, chartmuseum-fips, neuvector-scanner-fips, harvester-fips, datadog-agent-fips, harvester, chainctl-fips, kgateway-fips, scorecard,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: kubevela, skaffold, dagger, eksctl, fuse-overlayfs-snapshotter, kube-arangodb, k3s, kaniko, kargo, scorecard, gatekeeper, zot, docker-cli-buildx, neuvector-scanner, grype, linkerd2, helm-mapkubeapis, chartmuseum, kubescape, helm, rancher-helm, buildkitd, k8sgpt,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kubevela, skaffold, dagger, eksctl, fuse-overlayfs-snapshotter, kube-arangodb, k3s, kaniko, kargo, scorecard, gatekeeper, zot, docker-cli-buildx, neuvector-scanner, grype, linkerd2, helm-mapkubeapis, chartmuseum, kubescape, helm, rancher-helm, buildkitd, k8sgpt,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: kubevela, skaffold, dagger, eksctl, fuse-overlayfs-snapshotter, kube-arangodb, k3s, kaniko, kargo, scorecard, gatekeeper, zot, docker-cli-buildx, neuvector-scanner, grype, linkerd2, helm-mapkubeapis, chartmuseum, kubescape, helm, rancher-helm, buildkitd, k8sgpt,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: kubevela, skaffold, dagger, eksctl, fuse-overlayfs-snapshotter, kube-arangodb, k3s, kaniko, kargo, scorecard, gatekeeper, zot, docker-cli-buildx, neuvector-scanner, grype, linkerd2, helm-mapkubeapis, chartmuseum, kubescape, helm, rancher-helm, buildkitd, k8sgpt,...

CLEANSTART-2026-OK35650 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the rancher-agent package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-service-operator, rancher...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-service-operator, rancher...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, rancher, authentik-fips, azure-service-operator, azure-service-operator-fips, cloudbeat, vault, vault-fips, authentik, rancher-agent...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, rancher, authentik-fips, azure-service-operator, azure-service-operator-fips, cloudbeat, vault, vault-fips, authentik, rancher-agent...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kubevela, dynamic-localpv-provisioner, skaffold, cloudnative-pg, eksctl, kube-arangodb, k3s, kargo, cluster-api, argo-cd, kwok, docker-cli-buildx, percona-server-mongodb-operator, k8ssandra-client, kiali, linkerd2, argocd-image-updater, sonobuoy,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kubevela, dynamic-localpv-provisioner, skaffold, cloudnative-pg, eksctl, kube-arangodb, k3s, kargo, cluster-api, argo-cd, kwok, docker-cli-buildx, percona-server-mongodb-operator, k8ssandra-client, kiali, linkerd2, argocd-image-updater, sonobuoy,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler-fips, istio-fips, sonobuoy, docker-cli-buildx-fips, cloudbeat, jitsucom-bulker, trivy-operator-fips, gpu-operator-fips, rancher-fleet, argo-cd-fips, k8sgpt-operator, commercial-grafana, kpt, cilium-cli, longhorn-cli-fips, hubble-fips,...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: mattermost, commercial-grafana, dex, rancher, zitadel, teleport, gotrue-fips, gotrue, omni-fips, neuvector-fips, mattermost-fips, teleport-operator-fips, dex-fips, neuvector, rancher-agent, omni...