Images CVE Scans
CVE-2025-22868 - CVE Scans - 2026-11-13
Last scan: 2026-11-13T01:12:43Z
Go to the main page | Go to CVE index
Advisory: https://www.suse.com/security/cve/CVE-2025-22868.html
The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".
Search:
| Image | Release | Binary/Package | Dependency | Patched version | Severity | Status | Justification (for status not affected) |
|---|---|---|---|---|---|---|---|
| rancher/azureserviceoperator:v2.11.0 | Rancher Prime v2.13-head | aso-controller | golang.org/x/oauth2@v0.22.0 | 0.27.0 | HIGH | affected | |
| rancher/azureserviceoperator:v2.11.0 | Rancher Prime v2.13.11 | aso-controller | golang.org/x/oauth2@v0.22.0 | 0.27.0 | HIGH | affected | |
| ghcr.io/kubeflow/dashboard/access-management:v2.0.0 | SUSE AI latest | access-management | golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8 | 0.27.0 | HIGH | affected | |
| ghcr.io/kubeflow/dashboard/profile-controller:v2.0.0 | SUSE AI latest | manager | golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8 | 0.27.0 | HIGH | affected | |
| ghcr.io/kubeflow/kubeflow/kfam:v1.10.0 | SUSE AI latest | access-management | golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45 | 0.27.0 | HIGH | affected | |
| ghcr.io/kubeflow/kubeflow/notebook-controller:v1.10.0 | SUSE AI latest | manager | golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f | 0.27.0 | HIGH | affected | |
| ghcr.io/kubeflow/kubeflow/profile-controller:v1.10.0 | SUSE AI latest | manager | golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8 | 0.27.0 | HIGH | affected | |
| ghcr.io/kubeflow/kubeflow/pvcviewer-controller:v1.10.0 | SUSE AI latest | manager | golang.org/x/oauth2@v0.19.0 | 0.27.0 | HIGH | affected | |
| ghcr.io/kubeflow/kubeflow/tensorboard-controller:v1.10.0 | SUSE AI latest | manager | golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f | 0.27.0 | HIGH | affected | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Harvester master | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Harvester master-head | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-alertmanager:0.28.1-12.7 | Harvester v1.8-head | usr/bin/alertmanager | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Harvester v1.8-head | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-operator-prometheus-config-reloader:v0.80.1 | Harvester v1.8-head | bin/prometheus-config-reloader | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-alertmanager:0.28.1-12.7 | Harvester v1.8.2 | usr/bin/alertmanager | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Harvester v1.8.2 | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-operator-prometheus-config-reloader:v0.80.1 | Harvester v1.8.2 | bin/prometheus-config-reloader | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Harvester v1.9-head | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Harvester v1.9.0 | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kube-apiserver | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kube-controller-manager | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kube-proxy | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kube-scheduler | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kubelet | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kube-api-auth:v0.2.4 | Rancher Prime v2.12-head | usr/bin/kube-api-auth | golang.org/x/oauth2@v0.22.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.0.0 | Rancher Prime v2.12-head | usr/bin/kubectl1.31.9 | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.0.0 | Rancher Prime v2.12-head | bin/kuberlr | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.0.0 | Rancher Prime v2.12-head | usr/bin/kubectl1.32.5 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.1.3 | Rancher Prime v2.12-head | usr/bin/kubectl1.31.14 | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.1.3 | Rancher Prime v2.12-head | usr/bin/kubectl1.32.13 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.2.0 | Rancher Prime v2.12-head | usr/bin/kubectl1.31.14 | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.2.0 | Rancher Prime v2.12-head | usr/bin/kubectl1.32.13 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-brancz-kube-rbac-proxy:v0.18.2 | Rancher Prime v2.12-head | usr/local/bin/kube-rbac-proxy | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-cpi-release-manager:v1.30.1 | Rancher Prime v2.12-head | bin/vsphere-cloud-controller-manager | golang.org/x/oauth2@v0.18.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.2.0 | Rancher Prime v2.12-head | usr/bin/vsphere-csi | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.3.1 | Rancher Prime v2.12-head | usr/bin/vsphere-csi | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-csi-release-syncer:v3.2.0 | Rancher Prime v2.12-head | usr/bin/vsphere-syncer | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-csi-release-syncer:v3.3.1 | Rancher Prime v2.12-head | usr/bin/vsphere-syncer | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.32.2 | Rancher Prime v2.12-head | bin/vsphere-cloud-controller-manager | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Rancher Prime v2.12-head | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-state-metrics-kube-state-metrics:v2.15.0 | Rancher Prime v2.12-head | kube-state-metrics | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-attacher:v3.2.1 | Rancher Prime v2.12-head | csi-attacher | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v1.2.0 | Rancher Prime v2.12-head | csi-resizer | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-messagebird-sachet:0.3.1 | Rancher Prime v2.12-head | usr/local/bin/sachet | golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-alertmanager:v0.28.1 | Rancher Prime v2.12-head | bin/alertmanager | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-alertmanager:v0.28.1 | Rancher Prime v2.12-head | bin/amtool | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-node-exporter:v1.9.0 | Rancher Prime v2.12-head | bin/node_exporter | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-operator-admission-webhook:v0.80.1 | Rancher Prime v2.12-head | bin/admission-webhook | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-operator-prometheus-config-reloader:v0.80.1 | Rancher Prime v2.12-head | bin/prometheus-config-reloader | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-operator-prometheus-operator:v0.80.1 | Rancher Prime v2.12-head | bin/operator | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-prometheus:v3.2.1 | Rancher Prime v2.12-head | bin/prometheus | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-prometheus-prometheus:v3.2.1 | Rancher Prime v2.12-head | bin/promtool | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-sig-storage-csi-attacher:v4.5.0 | Rancher Prime v2.12-head | csi-attacher | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-attacher:v4.7.0 | Rancher Prime v2.12-head | csi-attacher | golang.org/x/oauth2@v0.22.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-attacher:v4.8.1 | Rancher Prime v2.12-head | csi-attacher | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.0 | Rancher Prime v2.12-head | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher Prime v2.12-head | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v1.10.0 | Rancher Prime v2.12-head | csi-resizer | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v1.10.1 | Rancher Prime v2.12-head | csi-resizer | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v1.12.0 | Rancher Prime v2.12-head | csi-resizer | golang.org/x/oauth2@v0.22.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-snapshotter:v7.0.1 | Rancher Prime v2.12-head | csi-snapshotter | golang.org/x/oauth2@v0.16.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-snapshotter:v7.0.2 | Rancher Prime v2.12-head | csi-snapshotter | golang.org/x/oauth2@v0.16.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-snapshotter:v8.2.0 | Rancher Prime v2.12-head | csi-snapshotter | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-snapshot-controller:v8.2.0 | Rancher Prime v2.12-head | snapshot-controller | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-thanos-thanos:v0.37.2 | Rancher Prime v2.12-head | bin/thanos | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/rancher:v2.12-head | Rancher Prime v2.12-head | opt/drivers/management-state/bin/docker-machine-driver-harvester | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12-head | bin/crictl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12-head | bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12-head | bin/kubelet | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-upgrade:v1.32.13-rke2r1 | Rancher Prime v2.12-head | usr/local/bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kube-apiserver | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kube-controller-manager | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kube-proxy | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kube-scheduler | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kubelet | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kube-api-auth:v0.2.4 | Rancher Prime v2.12.15 | usr/bin/kube-api-auth | golang.org/x/oauth2@v0.22.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.0.0 | Rancher Prime v2.12.15 | usr/bin/kubectl1.31.9 | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.0.0 | Rancher Prime v2.12.15 | bin/kuberlr | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.0.0 | Rancher Prime v2.12.15 | usr/bin/kubectl1.32.5 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.1.3 | Rancher Prime v2.12.15 | usr/bin/kubectl1.31.14 | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v5.1.3 | Rancher Prime v2.12.15 | usr/bin/kubectl1.32.13 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-brancz-kube-rbac-proxy:v0.18.2 | Rancher Prime v2.12.15 | usr/local/bin/kube-rbac-proxy | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-cpi-release-manager:v1.30.1 | Rancher Prime v2.12.15 | bin/vsphere-cloud-controller-manager | golang.org/x/oauth2@v0.18.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.2.0 | Rancher Prime v2.12.15 | usr/bin/vsphere-csi | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-csi-release-driver:v3.3.1 | Rancher Prime v2.12.15 | usr/bin/vsphere-csi | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-csi-release-syncer:v3.2.0 | Rancher Prime v2.12.15 | usr/bin/vsphere-syncer | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-csi-release-syncer:v3.3.1 | Rancher Prime v2.12.15 | usr/bin/vsphere-syncer | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.32.2 | Rancher Prime v2.12.15 | bin/vsphere-cloud-controller-manager | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Rancher Prime v2.12.15 | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-state-metrics-kube-state-metrics:v2.15.0 | Rancher Prime v2.12.15 | kube-state-metrics | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-attacher:v3.2.1 | Rancher Prime v2.12.15 | csi-attacher | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v1.2.0 | Rancher Prime v2.12.15 | csi-resizer | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-messagebird-sachet:0.3.1 | Rancher Prime v2.12.15 | usr/local/bin/sachet | golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-alertmanager:v0.28.1 | Rancher Prime v2.12.15 | bin/alertmanager | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-alertmanager:v0.28.1 | Rancher Prime v2.12.15 | bin/amtool | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-node-exporter:v1.9.0 | Rancher Prime v2.12.15 | bin/node_exporter | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-operator-admission-webhook:v0.80.1 | Rancher Prime v2.12.15 | bin/admission-webhook | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-operator-prometheus-config-reloader:v0.80.1 | Rancher Prime v2.12.15 | bin/prometheus-config-reloader | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-operator-prometheus-operator:v0.80.1 | Rancher Prime v2.12.15 | bin/operator | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-attacher:v4.5.0 | Rancher Prime v2.12.15 | csi-attacher | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-attacher:v4.7.0 | Rancher Prime v2.12.15 | csi-attacher | golang.org/x/oauth2@v0.22.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-attacher:v4.8.1 | Rancher Prime v2.12.15 | csi-attacher | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.0 | Rancher Prime v2.12.15 | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher Prime v2.12.15 | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v1.10.0 | Rancher Prime v2.12.15 | csi-resizer | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v1.10.1 | Rancher Prime v2.12.15 | csi-resizer | golang.org/x/oauth2@v0.13.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v1.12.0 | Rancher Prime v2.12.15 | csi-resizer | golang.org/x/oauth2@v0.22.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-snapshotter:v7.0.1 | Rancher Prime v2.12.15 | csi-snapshotter | golang.org/x/oauth2@v0.16.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-snapshotter:v7.0.2 | Rancher Prime v2.12.15 | csi-snapshotter | golang.org/x/oauth2@v0.16.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-snapshotter:v8.2.0 | Rancher Prime v2.12.15 | csi-snapshotter | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-snapshot-controller:v8.2.0 | Rancher Prime v2.12.15 | snapshot-controller | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-thanos-thanos:v0.37.2 | Rancher Prime v2.12.15 | bin/thanos | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/prom-prometheus:v3.2.1 | Rancher Prime v2.12.15 | bin/prometheus | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/prom-prometheus:v3.2.1 | Rancher Prime v2.12.15 | bin/promtool | golang.org/x/oauth2@v0.25.0 | 0.27.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/rancher:v2.12.15 | Rancher Prime v2.12.15 | opt/drivers/management-state/bin/docker-machine-driver-harvester | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12.15 | bin/crictl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12.15 | bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12.15 | bin/kubelet | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-upgrade:v1.32.13-rke2r1 | Rancher Prime v2.12.15 | usr/local/bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-alertmanager:0.28.1-12.7 | Rancher Prime v2.13-head | usr/bin/alertmanager | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-kube-rbac-proxy:0.19.1-15.2 | Rancher Prime v2.13-head | usr/bin/kube-rbac-proxy | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kube-apiserver | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kube-controller-manager | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kube-proxy | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kube-scheduler | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kubelet | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v6.0.0 | Rancher Prime v2.13-head | usr/bin/kubectl1.32.9 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v6.0.3 | Rancher Prime v2.13-head | usr/bin/kubectl1.32.13 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v6.1.3 | Rancher Prime v2.13-head | usr/bin/kubectl1.32.13 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v6.2.0 | Rancher Prime v2.13-head | usr/bin/kubectl1.32.13 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Rancher Prime v2.13-head | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-attacher:v3.2.1 | Rancher Prime v2.13-head | csi-attacher | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v1.2.0 | Rancher Prime v2.13-head | csi-resizer | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-messagebird-sachet:0.3.1 | Rancher Prime v2.13-head | usr/local/bin/sachet | golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher Prime v2.13-head | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-snapshotter:v8.2.0 | Rancher Prime v2.13-head | csi-snapshotter | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-snapshot-controller:v8.2.0 | Rancher Prime v2.13-head | snapshot-controller | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13-head | bin/crictl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13-head | bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13-head | bin/kubelet | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-upgrade:v1.32.13-rke2r1 | Rancher Prime v2.13-head | usr/local/bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-alertmanager:0.28.1-12.7 | Rancher Prime v2.13.11 | usr/bin/alertmanager | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-kube-rbac-proxy:0.19.1-15.2 | Rancher Prime v2.13.11 | usr/bin/kube-rbac-proxy | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kube-apiserver | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kube-controller-manager | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kube-proxy | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kube-scheduler | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kubelet | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v6.0.0 | Rancher Prime v2.13.11 | usr/bin/kubectl1.32.9 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v6.0.3 | Rancher Prime v2.13.11 | usr/bin/kubectl1.32.13 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/kuberlr-kubectl:v6.1.3 | Rancher Prime v2.13.11 | usr/bin/kubectl1.32.13 | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Rancher Prime v2.13.11 | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-attacher:v3.2.1 | Rancher Prime v2.13.11 | csi-attacher | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v1.2.0 | Rancher Prime v2.13.11 | csi-resizer | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-messagebird-sachet:0.3.1 | Rancher Prime v2.13.11 | usr/local/bin/sachet | golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher Prime v2.13.11 | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-snapshotter:v8.2.0 | Rancher Prime v2.13.11 | csi-snapshotter | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-snapshot-controller:v8.2.0 | Rancher Prime v2.13.11 | snapshot-controller | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13.11 | bin/crictl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13.11 | bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13.11 | bin/kubelet | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-upgrade:v1.32.13-rke2r1 | Rancher Prime v2.13.11 | usr/local/bin/kubectl | golang.org/x/oauth2@v0.23.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Rancher Prime v2.14-head | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-attacher:v3.2.1 | Rancher Prime v2.14-head | csi-attacher | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v1.2.0 | Rancher Prime v2.14-head | csi-resizer | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-messagebird-sachet:0.3.1 | Rancher Prime v2.14-head | usr/local/bin/sachet | golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher Prime v2.14-head | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-snapshotter:v8.2.0 | Rancher Prime v2.14-head | csi-snapshotter | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-snapshot-controller:v8.2.0 | Rancher Prime v2.14-head | snapshot-controller | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Rancher Prime v2.14.7 | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-attacher:v3.2.1 | Rancher Prime v2.14.7 | csi-attacher | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v1.2.0 | Rancher Prime v2.14.7 | csi-resizer | golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-messagebird-sachet:0.3.1 | Rancher Prime v2.14.7 | usr/local/bin/sachet | golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher Prime v2.14.7 | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-snapshotter:v8.2.0 | Rancher Prime v2.14.7 | csi-snapshotter | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-snapshot-controller:v8.2.0 | Rancher Prime v2.14.7 | snapshot-controller | golang.org/x/oauth2@v0.24.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Rancher Prime v2.15-head | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher Prime v2.15-head | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Rancher Prime v2.15.3 | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher Prime v2.15.3 | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher Prime v2.16-head | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Rancher v2.15-head | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher v2.15-head | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | Rancher v2.15.3 | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher v2.15.3 | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-provisioner:v4.0.1 | Rancher v2.16-head | csi-provisioner | golang.org/x/oauth2@v0.15.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| ghcr.io/kubeflow/dashboard/poddefaults-webhook:v2.0.0 | SUSE AI latest | webhook | golang.org/x/oauth2@v0.8.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |
| ghcr.io/kubeflow/kubeflow/poddefaults-webhook:v1.10.0 | SUSE AI latest | webhook | golang.org/x/oauth2@v0.8.0 | 0.27.0 | HIGH | not affected | vulnerable code not present |