SUSE Cloud Native - CVE Scans - 2026-11-14

How to use this page

• SUSE's KBs 000021646 and 000021647 provide detailed information about how the CVE portal works and how to inquire about CVEs in SUSE Cloud Native products, respectively.
• Only the latest patch version of each supported release line and the respective dev/head/master development branches are scanned. Older patch versions and no longer supported (EOL) versions are not scanned. Verify the supported versions in SUSE's product support lifecycle page.
• Consult SUSE's KB 000021574 to know how SUSE does its CVE triage workflow for software dependencies.
• The CVE scans are executed daily with internal automation developed by the SUSE Cloud Native Security team.
• Our scans use Rancher's VEX Hub reports to remove known false-positives. More information on how to use those reports is available in SUSE's KB 000021573 article.
• These pages are updated and regenerated daily.
• The CVE scanner used is Trivy with the latest version available.
• Only critical and high severity CVEs are displayed (internally we track all severities). Some medium and low severity CVEs might be listed due to recalculation of their original upstream severity (based on SUSE's security assessment).
• If you want to report an issue with these pages, please open an issue.