47 matches found
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: kubernetes, pulumi-kubernetes-operator, external-secrets-operator, cluster-api-provider-vsphere, keda, rancher-agent, cluster-autoscaler, kuma, kwok, calico, rke2-cloud-provider, spqr, tkn, rancher-system-agent, openfga, descheduler, metrics-server, cluster-api,...
CLEANSTART-2026-LM78105 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0
Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-DW47642 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0
Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JW55828 Security fixes for CVE-2025-61732, CVE-2025-68121 applied in versions: 2.13.1-r0
Multiple security vulnerabilities affect the rancher-agent package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2023-32198 vulnerabilities
Vulnerabilities for packages: rancher-agent, harvester-fips, rancher, harvester...
GHSA-95FC-G4GJ-MQMX vulnerabilities
Vulnerabilities for packages: rancher-agent, harvester-fips, rancher, harvester...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: nerdctl, kine, zarf-fips, coder-fips, mattermost-fips, tekton-pipelines, keda-fips, aactl, zarf, upwind-agent, chisel, docker-machine-driver-harvester, trivy-fips, trivy, kuma, argo-workflows, harbor, knative-kafka-broker-fips, argocd-image-updater, kubernetes,...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: kubernetes, aactl, knative-serving, loki, opentelemetry-collector, mattermost, kyverno, flux-source-controller, gitea, gitlab-kas, kine, chisel, flux, flux-image-automation-controller, prometheus, cilium-cli, telegraf, prometheus-operator, rancher, fscrypt, zarf,...
GHSA-JPPX-RXG9-JMRX vulnerabilities
Vulnerabilities for packages: kubernetes, podman, aactl, knative-serving, loki, opentelemetry-collector, mattermost, kyverno, gitlab-kas, kine, flux, prometheus, cilium-cli, telegraf, prometheus-operator, buildah, rancher, fscrypt, kubernetes-dashboard, istio, k3s, docker-cli-buildx, cert-manager...
GHSA-JPCC-P29G-P8MQ vulnerabilities
Vulnerabilities for packages: kargo, harvester-fips, kubescape-operator, consul-k8s-fips, docker, zarf-fips, chaos-mesh, newrelic-infrastructure-agent, headlamp, kaniko-fips, tigera-operator-fips, buildkitd-fips, cluster-api-helm-controller-fips, xeol-fips, zarf, dagger, linkerd2, upwind-agent,...
GHSA-XHF5-7WJV-PQXP vulnerabilities
Vulnerabilities for packages: kargo, harvester-fips, kubescape-operator, consul-k8s-fips, docker, zarf-fips, chaos-mesh, newrelic-infrastructure-agent, headlamp, kaniko-fips, tigera-operator-fips, buildkitd-fips, cluster-api-helm-controller-fips, xeol-fips, zarf, dagger, linkerd2, trivy-fips,...
GHSA-XHF5-7WJV-PQXP vulnerabilities
Vulnerabilities for packages: helm-push, xeol, rancher-agent, wolfictl, grype, trivy, neuvector-scanner, steampipe, docker-compose, kaniko, consul-k8s, fuse-overlayfs-snapshotter, docker, buildkitd, chartmuseum, syft, dagger, teleport, ctop, helm-operator, eksctl, k8sgpt, rancher, zarf, headlamp,...
GHSA-JPCC-P29G-P8MQ vulnerabilities
Vulnerabilities for packages: helm-push, xeol, rancher-agent, wolfictl, grype, trivy, neuvector-scanner, steampipe, docker-compose, kaniko, consul-k8s, fuse-overlayfs-snapshotter, docker, buildkitd, chartmuseum, syft, dagger, teleport, ctop, helm-operator, eksctl, k8sgpt, rancher, zarf, headlamp,...
CVE-2026-47262 vulnerabilities
Vulnerabilities for packages: helm-push, xeol, rancher-agent, wolfictl, grype, trivy, neuvector-scanner, steampipe, docker-compose, kaniko, consul-k8s, fuse-overlayfs-snapshotter, docker, buildkitd, chartmuseum, syft, dagger, teleport, ctop, helm-operator, eksctl, k8sgpt, rancher, zarf, headlamp,...
CVE-2026-53488 vulnerabilities
Vulnerabilities for packages: helm-push, xeol, rancher-agent, wolfictl, grype, trivy, neuvector-scanner, steampipe, docker-compose, kaniko, consul-k8s, fuse-overlayfs-snapshotter, docker, buildkitd, chartmuseum, syft, dagger, teleport, ctop, helm-operator, eksctl, k8sgpt, rancher, zarf, headlamp,...
CLEANSTART-2026-OK35650 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...
Multiple security vulnerabilities affect the rancher-agent package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...
CLEANSTART-2026-BL76821 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...
Multiple security vulnerabilities affect the rancher-agent package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...
CVE-2026-44503 vulnerabilities
Vulnerabilities for packages: rancher-agent, rancher, azure-service-operator...