GHSA-6q48-6c7w-9gw2 - CVE Scans - 2026-11-13

Last scan: 2026-11-13T01:12:43Z

Go to the main page | Go to CVE index

Advisory: https://github.com/advisories/GHSA-6q48-6c7w-9gw2

The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".

Image Release Binary/Package Dependency Patched version Severity Status Justification (for status not affected)
rancher/appco-k8s-sidecar:1.30.7-11.3 Harvester v1.8-head Python certifi@2025.7.9 2026.10.18 CRITICAL affected
rancher/appco-k8s-sidecar:1.30.7-11.3 Harvester v1.8.2 Python certifi@2025.7.9 2026.10.18 CRITICAL affected
rancher/appco-k8s-sidecar:1.30.7-11.3 Rancher Prime v2.12-head Python certifi@2025.7.9 2026.10.18 CRITICAL affected
rancher/mirrored-idealista-prom2teams:4.2.1 Rancher Prime v2.12-head Python certifi@2022.12.7 2026.10.18 CRITICAL affected
rancher/appco-k8s-sidecar:1.30.7-11.3 Rancher Prime v2.12.15 Python certifi@2025.7.9 2026.10.18 CRITICAL affected
rancher/mirrored-idealista-prom2teams:4.2.1 Rancher Prime v2.12.15 Python certifi@2022.12.7 2026.10.18 CRITICAL affected
rancher/appco-k8s-sidecar:1.30.7-11.3 Rancher Prime v2.13-head Python certifi@2025.7.9 2026.10.18 CRITICAL affected
rancher/mirrored-idealista-prom2teams:4.2.1 Rancher Prime v2.13-head Python certifi@2022.12.7 2026.10.18 CRITICAL affected
rancher/rancher-ai-agent:v1.0.2 Rancher Prime v2.13-head Python certifi@2026.5.20 2026.10.18 CRITICAL affected
rancher/appco-k8s-sidecar:1.30.7-11.3 Rancher Prime v2.13.11 Python certifi@2025.7.9 2026.10.18 CRITICAL affected
rancher/mirrored-idealista-prom2teams:4.2.1 Rancher Prime v2.13.11 Python certifi@2022.12.7 2026.10.18 CRITICAL affected
rancher/rancher-ai-agent:v1.0.2 Rancher Prime v2.13.11 Python certifi@2026.5.20 2026.10.18 CRITICAL affected
rancher/mirrored-idealista-prom2teams:4.2.1 Rancher Prime v2.14-head Python certifi@2022.12.7 2026.10.18 CRITICAL affected
rancher/mirrored-idealista-prom2teams:4.2.1 Rancher Prime v2.14.7 Python certifi@2022.12.7 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/katib/earlystopping-medianstop:v0.19.0 SUSE AI latest Python certifi@2025.10.5 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/katib/enas-cnn-cifar10-cpu:v0.19.0 SUSE AI latest Python certifi@2025.10.5 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/katib/suggestion-enas:v0.19.0 SUSE AI latest Python certifi@2025.10.5 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/katib/tfevent-metrics-collector:v0.19.0 SUSE AI latest Python certifi@2025.10.5 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/kubeflow/jupyter-web-app:v1.10.0 SUSE AI latest Python certifi@2025.1.31 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/kubeflow/notebook-servers/codeserver-python:v1.11.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-cuda-full:v1.11.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-full:v1.11.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-scipy:v1.11.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-cuda-full:v1.11.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-full:v1.11.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/kubeflow/notebook-servers/rstudio-tidyverse:v1.11.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/kubeflow/tensorboards-web-app:v1.10.0 SUSE AI latest Python certifi@2025.1.31 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/kubeflow/volumes-web-app:v1.10.0 SUSE AI latest Python certifi@2025.1.31 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/notebooks/jupyter-web-app:v1.11.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/notebooks/tensorboards-web-app:v1.11.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/notebooks/volumes-web-app:v1.11.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/trainer/dataset-initializer:v2.3.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/trainer/dataset-initializer:v2.3.0 SUSE AI latest Python certifi@2026.6.17 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/trainer/mlx-runtime:v2.3.0 SUSE AI latest Python certifi@2026.6.17 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/trainer/mlx-runtime:v2.3.0 SUSE AI latest Python certifi@2026.7.22 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/trainer/model-initializer:v2.3.0 SUSE AI latest Python certifi@2026.5.20 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/trainer/model-initializer:v2.3.0 SUSE AI latest Python certifi@2026.6.17 2026.10.18 CRITICAL affected
ghcr.io/kubeflow/trainer/torchtune-trainer:v2.3.0 SUSE AI latest Python certifi@2025.10.5 2026.10.18 CRITICAL affected
kserve/huggingfaceserver:v0.21.0 SUSE AI latest Python certifi@2025.1.31 2026.10.18 CRITICAL affected
kserve/huggingfaceserver:v0.21.0-gpu SUSE AI latest Python certifi@2025.1.31 2026.10.18 CRITICAL affected
kserve/huggingfaceserver:v0.21.0-gpu SUSE AI latest Python certifi@2026.6.17 2026.10.18 CRITICAL affected
kserve/lgbserver:v0.21.0 SUSE AI latest Python certifi@2025.1.31 2026.10.18 CRITICAL affected
kserve/models-web-app:v0.13.0 SUSE AI latest Python certifi@2024.7.4 2026.10.18 CRITICAL affected
kserve/paddleserver:v0.21.0 SUSE AI latest Python certifi@2025.1.31 2026.10.18 CRITICAL affected
kserve/pmmlserver:v0.21.0 SUSE AI latest Python certifi@2025.1.31 2026.10.18 CRITICAL affected
kserve/sklearnserver:v0.21.0 SUSE AI latest Python certifi@2026.4.22 2026.10.18 CRITICAL affected
kserve/storage-initializer:v0.21.0 SUSE AI latest Python certifi@2025.4.26 2026.10.18 CRITICAL affected
kserve/xgbserver:v0.21.0 SUSE AI latest Python certifi@2025.1.31 2026.10.18 CRITICAL affected
kubeflowkatib/enas-cnn-cifar10-cpu:v0.17.0 SUSE AI latest Python certifi@2024.7.4 2026.10.18 CRITICAL affected
kubeflowkatib/mxnet-mnist:v0.16.0 SUSE AI latest Python certifi@2023.7.22 2026.10.18 CRITICAL affected
pytorch/pytorch:2.11.0-cuda12.8-cudnn9-runtime SUSE AI latest Python certifi@2026.2.25 2026.10.18 CRITICAL affected
pytorch/torchserve-kfs:0.12.0 SUSE AI latest Python certifi@2024.8.30 2026.10.18 CRITICAL affected
seldonio/mlserver:1.7.1 SUSE AI latest Python certifi@2025.4.26 2026.10.18 CRITICAL affected
tensorflow/tensorflow:2.21.0 SUSE AI latest Python certifi@2026.2.25 2026.10.18 CRITICAL affected