CVE-2026-50163 - CVE Scans - 2026-11-13

Last scan: 2026-11-13T01:12:43Z

Go to the main page | Go to CVE index

Advisory: https://www.suse.com/security/cve/CVE-2026-50163.html

The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".

Image Release Binary/Package Dependency Patched version Severity Status Justification (for status not affected)
rancher/mirrored-calico-operator:v1.42.3 Rancher Prime v2.12-head usr/bin/operator oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH affected
rancher/mirrored-calico-operator:v1.42.3 Rancher Prime v2.12.15 usr/bin/operator oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH affected
alpine/k8s:1.36.2 SUSE AI latest root/.local/share/helm/plugins/helm-diff/bin/diff oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH affected
alpine/k8s:1.36.2 SUSE AI latest usr/bin/eksctl oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH affected
alpine/k8s:1.36.2 SUSE AI latest usr/bin/vals oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH affected
rancher/shell:v0.8.3 Harvester master usr/local/bin/k9s oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.8.3 Harvester master usr/local/bin/helm oras.land/oras-go/v2@v2.6.1 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/system-agent-installer-rancher:v2.15.2 Harvester master-head helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/fleet-agent:v0.15.4 Harvester v1.8-head usr/bin/fleetagent oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/fleet:v0.15.4 Harvester v1.8-head usr/bin/fleet oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/fleet:v0.15.4 Harvester v1.8-head usr/bin/fleetcontroller oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/rancher-agent:v2.14.3 Harvester v1.8-head usr/bin/agent oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/rancher:v2.14.3 Harvester v1.8-head usr/bin/rancher oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.7.1 Harvester v1.8-head usr/local/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.7.1 Harvester v1.8-head usr/local/bin/k9s oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/system-agent-installer-rancher:v2.14.3 Harvester v1.8-head helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/turtles:v0.26.3 Harvester v1.8-head manager oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/fleet-agent:v0.15.4 Harvester v1.8.2 usr/bin/fleetagent oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/fleet:v0.15.4 Harvester v1.8.2 usr/bin/fleet oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/fleet:v0.15.4 Harvester v1.8.2 usr/bin/fleetcontroller oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/klipper-helm:v0.13.3-build20260727 Harvester v1.8.2 home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260727 Harvester v1.8.2 home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260727 Harvester v1.8.2 usr/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/rancher-agent:v2.14.3 Harvester v1.8.2 usr/bin/agent oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/rancher:v2.14.3 Harvester v1.8.2 usr/bin/rancher oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.7.1 Harvester v1.8.2 usr/local/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.7.1 Harvester v1.8.2 usr/local/bin/k9s oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/system-agent-installer-rancher:v2.14.3 Harvester v1.8.2 helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/turtles:v0.26.3 Harvester v1.8.2 manager oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.8.3 Harvester v1.9-head usr/local/bin/k9s oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.8.3 Harvester v1.9-head usr/local/bin/helm oras.land/oras-go/v2@v2.6.1 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260727 Harvester v1.9.0 home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260727 Harvester v1.9.0 home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260727 Harvester v1.9.0 usr/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/shell:v0.8.1 Harvester v1.9.0 usr/bin/helm oras.land/oras-go/v2@v2.6.1 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/shell:v0.8.1 Harvester v1.9.0 usr/bin/k9s oras.land/oras-go/v2@v2.6.1 2.6.2 HIGH not affected vulnerable code not present
rancher/system-agent-installer-rancher:v2.15.0 Harvester v1.9.0 helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/turtles:v0.27.0 Harvester v1.9.0 manager oras.land/oras-go/v2@v2.6.1 2.6.2 HIGH not affected vulnerable code not present
registry.suse.com/rancher/rancher-ai-mcp:v1.0.3 Rancher AI v1.0.3 usr/local/bin/mcp oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.0.3 Rancher AI v1.0.3 usr/local/bin/mcp oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/klipper-helm:v0.13.3-build20260727 Rancher Prime v2.12-head home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260727 Rancher Prime v2.12-head home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260727 Rancher Prime v2.12-head usr/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/kube-api-auth:v0.2.4 Rancher Prime v2.12-head usr/bin/kube-api-auth oras.land/oras-go/v2@v2.4.0 2.6.2 HIGH not affected vulnerable code not present
rancher/klipper-helm:v0.13.3-build20260727 Rancher Prime v2.12.15 home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260727 Rancher Prime v2.12.15 home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260727 Rancher Prime v2.12.15 usr/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/kube-api-auth:v0.2.4 Rancher Prime v2.12.15 usr/bin/kube-api-auth oras.land/oras-go/v2@v2.4.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.5.5 Rancher Prime v2.12.15 usr/local/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.5.5 Rancher Prime v2.12.15 usr/local/bin/k9s oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.13-head home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.13-head home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.13-head usr/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/rancher-ai-mcp:v1.0.2 Rancher Prime v2.13-head usr/local/bin/mcp oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.13.11 home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.13.11 home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.13.11 usr/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/rancher-ai-mcp:v1.0.2 Rancher Prime v2.13.11 usr/local/bin/mcp oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.6.6 Rancher Prime v2.13.11 usr/local/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.6.6 Rancher Prime v2.13.11 usr/local/bin/k9s oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.14-head home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.14-head home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.14-head usr/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.14.7 home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.14.7 home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/klipper-helm:v0.13.3-build20260820 Rancher Prime v2.14.7 usr/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/shell:v0.7.3 Rancher Prime v2.14.7 usr/local/bin/helm oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.7.3 Rancher Prime v2.14.7 usr/local/bin/k9s oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.8.3 Rancher Prime v2.15.3 usr/local/bin/k9s oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.8.3 Rancher Prime v2.15.3 usr/local/bin/helm oras.land/oras-go/v2@v2.6.1 2.6.2 HIGH not affected vulnerable code not in execute path
rancher/shell:v0.8.3 Rancher v2.15.3 usr/local/bin/k9s oras.land/oras-go/v2@v2.6.0 2.6.2 HIGH not affected vulnerable code not present
rancher/shell:v0.8.3 Rancher v2.15.3 usr/local/bin/helm oras.land/oras-go/v2@v2.6.1 2.6.2 HIGH not affected vulnerable code not in execute path
alpine/k8s:1.36.2 SUSE AI latest usr/bin/helm oras.land/oras-go/v2@v2.6.1 2.6.2 HIGH not affected vulnerable code not in execute path