GHSA-537c-gmf6-5ccf - CVE Scans - 2026-11-13

Last scan: 2026-11-13T01:12:43Z

Go to the main page | Go to CVE index

Advisory: https://github.com/advisories/GHSA-537c-gmf6-5ccf

The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".

Image Release Binary/Package Dependency Patched version Severity Status Justification (for status not affected)
longhornio/longhorn-instance-manager:v1.11.2 Harvester v1.8.2 Python cryptography@47.0.0 48.0.1 HIGH affected
rancher/rancher-ai-agent:v1.0.2 Rancher Prime v2.13-head Python cryptography@48.0.0 48.0.1 HIGH affected
rancher/rancher-ai-agent:v1.0.2 Rancher Prime v2.13.11 Python cryptography@48.0.0 48.0.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/codeserver-python:v1.11.0 SUSE AI latest Python cryptography@48.0.0 48.0.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-cuda-full:v1.11.0 SUSE AI latest Python cryptography@48.0.0 48.0.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-full:v1.11.0 SUSE AI latest Python cryptography@48.0.0 48.0.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-scipy:v1.11.0 SUSE AI latest Python cryptography@48.0.0 48.0.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-cuda-full:v1.11.0 SUSE AI latest Python cryptography@48.0.0 48.0.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-full:v1.11.0 SUSE AI latest Python cryptography@48.0.0 48.0.1 HIGH affected
ghcr.io/kubeflow/notebooks/jupyter-web-app:v1.11.0 SUSE AI latest Python cryptography@48.0.0 48.0.1 HIGH affected
ghcr.io/kubeflow/notebooks/tensorboards-web-app:v1.11.0 SUSE AI latest Python cryptography@48.0.0 48.0.1 HIGH affected
ghcr.io/kubeflow/notebooks/volumes-web-app:v1.11.0 SUSE AI latest Python cryptography@48.0.0 48.0.1 HIGH affected
pytorch/torchserve-kfs:0.12.0 SUSE AI latest Python cryptography@43.0.1 48.0.1 HIGH affected
kserve/huggingfaceserver:v0.21.0 SUSE AI latest Python cryptography@49.0.0 48.0.1 HIGH not affected version of the dependency not affected
kserve/huggingfaceserver:v0.21.0-gpu SUSE AI latest Python cryptography@49.0.0 48.0.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-instance-manager:v1.11.3 Harvester v1.8-head Python cryptography@49.0.0 48.0.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-instance-manager:v1.11.3 Longhorn v1.11.3 Python cryptography@49.0.0 48.0.1 HIGH not affected version of the dependency not affected