Images CVE Scans
CVE-2026-39883 - CVE Scans - 2026-11-13
Last scan: 2026-11-13T01:12:43Z
Go to the main page | Go to CVE index
Advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-39883
The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".
Search:
| Image | Release | Binary/Package | Dependency | Patched version | Severity | Status | Justification (for status not affected) |
|---|---|---|---|---|---|---|---|
| rancher/harvester-kubeovn-operator:v1.15.4-r2 | Harvester v1.8-head | manager | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | affected | |
| rancher/harvester-kubeovn-operator:v1.15.4-r2 | Harvester v1.8.2 | manager | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | affected | |
| rancher/appco-kubernetes-cluster-autoscaler:1.34.0-3.4 | Rancher Prime v2.13-head | usr/bin/cluster-autoscaler | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | affected | |
| rancher/azureserviceoperator:v2.11.0 | Rancher Prime v2.13-head | aso-controller | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-aws-controller:v2.9.1 | Rancher Prime v2.13-head | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-azure-controller:v1.21.0 | Rancher Prime v2.13-head | manager | go.opentelemetry.io/otel/sdk@v1.37.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-gcp-controller:v1.10.0 | Rancher Prime v2.13-head | manager | go.opentelemetry.io/otel/sdk@v1.35.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-vsphere-controller:v1.13.1 | Rancher Prime v2.13-head | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | affected | |
| rancher/appco-kubernetes-cluster-autoscaler:1.34.0-3.4 | Rancher Prime v2.13.11 | usr/bin/cluster-autoscaler | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | affected | |
| rancher/azureserviceoperator:v2.11.0 | Rancher Prime v2.13.11 | aso-controller | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-aws-controller:v2.9.1 | Rancher Prime v2.13.11 | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-azure-controller:v1.21.0 | Rancher Prime v2.13.11 | manager | go.opentelemetry.io/otel/sdk@v1.37.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-gcp-controller:v1.10.0 | Rancher Prime v2.13.11 | manager | go.opentelemetry.io/otel/sdk@v1.35.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-vsphere-controller:v1.13.1 | Rancher Prime v2.13.11 | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | affected | |
| rancher/appco-kubernetes-cluster-autoscaler:1.35.0-4.1 | Rancher Prime v2.14-head | usr/bin/cluster-autoscaler | go.opentelemetry.io/otel/sdk@v1.37.0 | 1.43.0 | HIGH | affected | |
| rancher/azureserviceoperator:v2.13.0 | Rancher Prime v2.14-head | aso-controller | go.opentelemetry.io/otel/sdk@v1.35.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-azure-controller:v1.22.0 | Rancher Prime v2.14-head | manager | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-gcp-controller:v1.11.1 | Rancher Prime v2.14-head | manager | go.opentelemetry.io/otel/sdk@v1.38.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-vsphere-controller:v1.15.2 | Rancher Prime v2.14-head | manager | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | affected | |
| rancher/appco-kubernetes-cluster-autoscaler:1.35.0-4.1 | Rancher Prime v2.14.7 | usr/bin/cluster-autoscaler | go.opentelemetry.io/otel/sdk@v1.37.0 | 1.43.0 | HIGH | affected | |
| rancher/azureserviceoperator:v2.13.0 | Rancher Prime v2.14.7 | aso-controller | go.opentelemetry.io/otel/sdk@v1.35.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-azure-controller:v1.22.0 | Rancher Prime v2.14.7 | manager | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-gcp-controller:v1.11.1 | Rancher Prime v2.14.7 | manager | go.opentelemetry.io/otel/sdk@v1.38.0 | 1.43.0 | HIGH | affected | |
| rancher/cluster-api-vsphere-controller:v1.15.2 | Rancher Prime v2.14.7 | manager | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | affected | |
| rancher/appco-kubernetes-cluster-autoscaler:1.35.0-4.1 | Rancher Prime v2.15-head | usr/bin/cluster-autoscaler | go.opentelemetry.io/otel/sdk@v1.37.0 | 1.43.0 | HIGH | affected | |
| rancher/azureserviceoperator:v2.18.0 | Rancher Prime v2.15-head | aso-controller | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | affected | |
| rancher/appco-kubernetes-cluster-autoscaler:1.35.0-4.1 | Rancher Prime v2.15.3 | usr/bin/cluster-autoscaler | go.opentelemetry.io/otel/sdk@v1.37.0 | 1.43.0 | HIGH | affected | |
| rancher/azureserviceoperator:v2.18.0 | Rancher Prime v2.15.3 | aso-controller | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | affected | |
| rancher/appco-kubernetes-cluster-autoscaler:1.35.0-4.1 | Rancher Prime v2.16-head | usr/bin/cluster-autoscaler | go.opentelemetry.io/otel/sdk@v1.37.0 | 1.43.0 | HIGH | affected | |
| longhornio/csi-resizer:v2.2.1 | Harvester master | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/harvester-upgrade:master-head | Harvester master | usr/bin/wharfie | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/harvester-upgrade:master-head | Harvester master-head | usr/bin/wharfie | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| kubeovn/kube-ovn:v1.15.4 | Harvester v1.8-head | kube-ovn/kube-ovn-cmd | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| kubeovn/kube-ovn:v1.15.4 | Harvester v1.8-head | kube-ovn/kube-ovn-controller | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| kubeovn/kube-ovn:v1.15.4 | Harvester v1.8-head | kube-ovn/kube-ovn-daemon | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| longhornio/csi-resizer:v2.2.0 | Harvester v1.8-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/appco-grafana:12.1.1-2.2 | Harvester v1.8-head | usr/share/grafana/bin/grafana | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-kube-state-metrics:2.17.0-10.7 | Harvester v1.8-head | usr/bin/kube-state-metrics | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/cluster-api-controller:v1.12.7 | Harvester v1.8-head | manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/harvester-upgrade:v1.8-head | Harvester v1.8-head | usr/bin/wharfie | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/prom-prometheus:v3.5.0 | Harvester v1.8-head | bin/prometheus | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/prom-prometheus:v3.5.0 | Harvester v1.8-head | bin/promtool | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| registry.k8s.io/descheduler/descheduler:v0.33.0 | Harvester v1.8-head | bin/descheduler | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| registry.k8s.io/sig-storage/snapshot-controller:v8.5.0 | Harvester v1.8-head | snapshot-controller | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| kubeovn/kube-ovn:v1.15.4 | Harvester v1.8.2 | kube-ovn/kube-ovn-cmd | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| kubeovn/kube-ovn:v1.15.4 | Harvester v1.8.2 | kube-ovn/kube-ovn-controller | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| kubeovn/kube-ovn:v1.15.4 | Harvester v1.8.2 | kube-ovn/kube-ovn-daemon | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-grafana:12.1.1-2.2 | Harvester v1.8.2 | usr/share/grafana/bin/grafana | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-kube-state-metrics:2.17.0-10.7 | Harvester v1.8.2 | usr/bin/kube-state-metrics | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/cluster-api-controller:v1.12.7 | Harvester v1.8.2 | manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/harvester-upgrade:v1.8.2 | Harvester v1.8.2 | usr/bin/wharfie | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/harvester-webhook:v1.8.2 | Harvester v1.8.2 | usr/bin/harvester-webhook | go.opentelemetry.io/otel/sdk@v1.37.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/harvester:v1.8.2 | Harvester v1.8.2 | usr/bin/harvester | go.opentelemetry.io/otel/sdk@v1.37.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/prom-prometheus:v3.5.0 | Harvester v1.8.2 | bin/prometheus | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/prom-prometheus:v3.5.0 | Harvester v1.8.2 | bin/promtool | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| registry.k8s.io/descheduler/descheduler:v0.33.0 | Harvester v1.8.2 | bin/descheduler | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| registry.k8s.io/sig-storage/snapshot-controller:v8.5.0 | Harvester v1.8.2 | snapshot-controller | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/harvester-upgrade:v1.9-head | Harvester v1.9-head | usr/bin/wharfie | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| longhornio/csi-resizer:v2.2.1 | Harvester v1.9.0 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/harvester-upgrade:v1.9.0 | Harvester v1.9.0 | usr/bin/wharfie | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| longhornio/csi-resizer:v2.2.1 | Longhorn master | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| longhornio/csi-resizer:v2.2.0 | Longhorn v1.11.3 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| longhornio/csi-resizer:v2.2.1 | Longhorn v1.12.1 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kube-apiserver | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kube-controller-manager | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kube-proxy | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kube-scheduler | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12-head | usr/local/bin/kubelet | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/harvester-cloud-provider:v0.2.5 | Rancher Prime v2.12-head | usr/bin/harvester-cloud-provider | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/kube-api-auth:v0.2.4 | Rancher Prime v2.12-head | usr/bin/kube-api-auth | go.opentelemetry.io/otel/sdk@v1.23.1 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-brancz-kube-rbac-proxy:v0.18.2 | Rancher Prime v2.12-head | usr/local/bin/kube-rbac-proxy | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cilium-clustermesh-apiserver:v1.19.6 | Rancher Prime v2.12-head | usr/bin/etcd | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-cpi-release-manager:v1.30.1 | Rancher Prime v2.12-head | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.19.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.32.2 | Rancher Prime v2.12-head | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.33.1 | Rancher Prime v2.12-head | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cluster-api-controller:v1.10.2 | Rancher Prime v2.12-head | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-grafana-grafana:11.5.5 | Rancher Prime v2.12-head | usr/share/grafana/bin/grafana | go.opentelemetry.io/otel/sdk@v1.35.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-library-traefik:2.11.30 | Rancher Prime v2.12-head | usr/local/bin/traefik | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-library-traefik:3.3.6 | Rancher Prime v2.12-head | usr/local/bin/traefik | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v2.2.1 | Rancher Prime v2.12-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-prometheus-prometheus:v3.2.1 | Rancher Prime v2.12-head | bin/prometheus | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-thanos-thanos:v0.37.2 | Rancher Prime v2.12-head | bin/thanos | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12-head | bin/kubelet | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12-head | bin/crictl | go.opentelemetry.io/otel/sdk@v1.32.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12-head | bin/containerd | go.opentelemetry.io/otel/sdk@v1.35.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-upgrade:v1.32.13-rke2r1 | Rancher Prime v2.12-head | opt/rke2 | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/system-agent:v0.3.13-suc | Rancher Prime v2.12-head | opt/rancher-system-agent-suc/rancher-system-agent | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kube-apiserver | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kube-controller-manager | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kube-proxy | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kube-scheduler | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.12.15 | usr/local/bin/kubelet | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/harvester-cloud-provider:v0.2.5 | Rancher Prime v2.12.15 | usr/bin/harvester-cloud-provider | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/kube-api-auth:v0.2.4 | Rancher Prime v2.12.15 | usr/bin/kube-api-auth | go.opentelemetry.io/otel/sdk@v1.23.1 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-brancz-kube-rbac-proxy:v0.18.2 | Rancher Prime v2.12.15 | usr/local/bin/kube-rbac-proxy | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cilium-clustermesh-apiserver:v1.19.6 | Rancher Prime v2.12.15 | usr/bin/etcd | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere-cpi-release-manager:v1.30.1 | Rancher Prime v2.12.15 | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.19.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.32.2 | Rancher Prime v2.12.15 | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.33.1 | Rancher Prime v2.12.15 | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cluster-api-controller:v1.10.2 | Rancher Prime v2.12.15 | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-grafana-grafana:11.5.5 | Rancher Prime v2.12.15 | usr/share/grafana/bin/grafana | go.opentelemetry.io/otel/sdk@v1.35.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-library-traefik:2.11.30 | Rancher Prime v2.12.15 | usr/local/bin/traefik | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-library-traefik:3.3.6 | Rancher Prime v2.12.15 | usr/local/bin/traefik | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v2.2.1 | Rancher Prime v2.12.15 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-thanos-thanos:v0.37.2 | Rancher Prime v2.12.15 | bin/thanos | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/prom-prometheus:v3.2.1 | Rancher Prime v2.12.15 | bin/prometheus | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12.15 | bin/kubelet | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12.15 | bin/crictl | go.opentelemetry.io/otel/sdk@v1.32.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.12.15 | bin/containerd | go.opentelemetry.io/otel/sdk@v1.35.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-upgrade:v1.32.13-rke2r1 | Rancher Prime v2.12.15 | opt/rke2 | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/system-agent:v0.3.13-suc | Rancher Prime v2.12.15 | opt/rancher-system-agent-suc/rancher-system-agent | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-grafana:12.1.1-2.2 | Rancher Prime v2.13-head | usr/share/grafana/bin/grafana | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-kube-rbac-proxy:0.19.1-15.2 | Rancher Prime v2.13-head | usr/bin/kube-rbac-proxy | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-kube-state-metrics:2.17.0-10.7 | Rancher Prime v2.13-head | usr/bin/kube-state-metrics | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-thanos:0.39.2-7.3 | Rancher Prime v2.13-head | usr/bin/thanos | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/cluster-api-controller:v1.10.6 | Rancher Prime v2.13-head | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kube-apiserver | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kube-controller-manager | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kube-proxy | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kube-scheduler | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13-head | usr/local/bin/kubelet | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/kubeadm-bootstrap-controller:v1.10.6 | Rancher Prime v2.13-head | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/kubeadm-control-plane-controller:v1.10.6 | Rancher Prime v2.13-head | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.34.0 | Rancher Prime v2.13-head | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cluster-api-controller:v1.10.6 | Rancher Prime v2.13-head | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-library-traefik:3.3.6 | Rancher Prime v2.13-head | usr/local/bin/traefik | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v2.2.1 | Rancher Prime v2.13-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-prometheus-prometheus:v3.5.0 | Rancher Prime v2.13-head | bin/prometheus | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-prometheus-prometheus:v3.5.0 | Rancher Prime v2.13-head | bin/promtool | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-attacher:v4.10.0 | Rancher Prime v2.13-head | csi-attacher | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v2.0.0 | Rancher Prime v2.13-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13-head | bin/kubelet | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13-head | bin/crictl | go.opentelemetry.io/otel/sdk@v1.32.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13-head | bin/containerd | go.opentelemetry.io/otel/sdk@v1.35.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-upgrade:v1.32.13-rke2r1 | Rancher Prime v2.13-head | opt/rke2 | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-grafana:12.1.1-2.2 | Rancher Prime v2.13.11 | usr/share/grafana/bin/grafana | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-kube-rbac-proxy:0.19.1-15.2 | Rancher Prime v2.13.11 | usr/bin/kube-rbac-proxy | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-kube-state-metrics:2.17.0-10.7 | Rancher Prime v2.13.11 | usr/bin/kube-state-metrics | go.opentelemetry.io/otel/sdk@v1.33.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/appco-thanos:0.39.2-7.3 | Rancher Prime v2.13.11 | usr/bin/thanos | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/cluster-api-controller:v1.10.6 | Rancher Prime v2.13.11 | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kube-apiserver | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kube-controller-manager | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kube-proxy | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kube-scheduler | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 | Rancher Prime v2.13.11 | usr/local/bin/kubelet | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/kubeadm-bootstrap-controller:v1.10.6 | Rancher Prime v2.13.11 | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/kubeadm-control-plane-controller:v1.10.6 | Rancher Prime v2.13.11 | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.34.0 | Rancher Prime v2.13.11 | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cluster-api-controller:v1.10.6 | Rancher Prime v2.13.11 | manager | go.opentelemetry.io/otel/sdk@v1.29.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-library-traefik:3.3.6 | Rancher Prime v2.13.11 | usr/local/bin/traefik | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v2.2.1 | Rancher Prime v2.13.11 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-sig-storage-csi-attacher:v4.10.0 | Rancher Prime v2.13.11 | csi-attacher | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v2.0.0 | Rancher Prime v2.13.11 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/prom-prometheus:v3.5.0 | Rancher Prime v2.13.11 | bin/prometheus | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/prom-prometheus:v3.5.0 | Rancher Prime v2.13.11 | bin/promtool | go.opentelemetry.io/otel/sdk@v1.36.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13.11 | bin/kubelet | go.opentelemetry.io/otel/sdk@v1.28.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13.11 | bin/crictl | go.opentelemetry.io/otel/sdk@v1.32.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-runtime:v1.32.13-rke2r1 | Rancher Prime v2.13.11 | bin/containerd | go.opentelemetry.io/otel/sdk@v1.35.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/rke2-upgrade:v1.32.13-rke2r1 | Rancher Prime v2.13.11 | opt/rke2 | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/cluster-api-aws-controller:v2.11.1 | Rancher Prime v2.14-head | manager | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/cluster-api-controller:v1.12.7 | Rancher Prime v2.14-head | manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/kubeadm-bootstrap-controller:v1.12.7 | Rancher Prime v2.14-head | manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/kubeadm-control-plane-controller:v1.12.7 | Rancher Prime v2.14-head | manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.35.1 | Rancher Prime v2.14-head | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-library-traefik:3.3.6 | Rancher Prime v2.14-head | usr/local/bin/traefik | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v2.2.1 | Rancher Prime v2.14-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-sig-storage-csi-attacher:v4.10.0 | Rancher Prime v2.14-head | csi-attacher | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v2.0.0 | Rancher Prime v2.14-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/cluster-api-aws-controller:v2.11.1 | Rancher Prime v2.14.7 | manager | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/cluster-api-controller:v1.12.7 | Rancher Prime v2.14.7 | manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/kubeadm-bootstrap-controller:v1.12.7 | Rancher Prime v2.14.7 | manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/kubeadm-control-plane-controller:v1.12.7 | Rancher Prime v2.14.7 | manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.35.1 | Rancher Prime v2.14.7 | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-library-traefik:3.3.6 | Rancher Prime v2.14.7 | usr/local/bin/traefik | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v2.2.1 | Rancher Prime v2.14.7 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-sig-storage-csi-attacher:v4.10.0 | Rancher Prime v2.14.7 | csi-attacher | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v2.0.0 | Rancher Prime v2.14.7 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/cluster-api-aws-controller:v2.11.1 | Rancher Prime v2.15-head | manager | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-cloud-provider-vsphere:v1.36.0 | Rancher Prime v2.15-head | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v2.2.1 | Rancher Prime v2.15-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-sig-storage-csi-attacher:v4.10.0 | Rancher Prime v2.15-head | csi-attacher | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v2.0.0 | Rancher Prime v2.15-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/cluster-api-aws-controller:v2.11.1 | Rancher Prime v2.15.3 | manager | go.opentelemetry.io/otel/sdk@v1.39.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-cloud-provider-vsphere:v1.36.0 | Rancher Prime v2.15.3 | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v2.2.1 | Rancher Prime v2.15.3 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-sig-storage-csi-attacher:v4.10.0 | Rancher Prime v2.15.3 | csi-attacher | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v2.0.0 | Rancher Prime v2.15.3 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-attacher:v4.10.0 | Rancher Prime v2.16-head | csi-attacher | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v2.0.0 | Rancher Prime v2.16-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.36.0 | Rancher v2.15-head | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v2.2.1 | Rancher v2.15-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-sig-storage-csi-attacher:v4.10.0 | Rancher v2.15-head | csi-attacher | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v2.0.0 | Rancher v2.15-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-cloud-provider-vsphere:v1.36.0 | Rancher v2.15.3 | bin/vsphere-cloud-controller-manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-longhornio-csi-resizer:v2.2.1 | Rancher v2.15.3 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| rancher/mirrored-sig-storage-csi-attacher:v4.10.0 | Rancher v2.15.3 | csi-attacher | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v2.0.0 | Rancher v2.15.3 | csi-resizer | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-attacher:v4.10.0 | Rancher v2.16-head | csi-attacher | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| rancher/mirrored-sig-storage-csi-resizer:v2.0.0 | Rancher v2.16-head | csi-resizer | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | HIGH | not affected | vulnerable code not present |
| ghcr.io/kubeflow/model-registry/controller:v0.3.8 | SUSE AI latest | manager | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |
| ghcr.io/kubeflow/model-registry/storage-initializer:v0.3.8 | SUSE AI latest | mr-storage-initializer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | HIGH | not affected | vulnerable code not in execute path |