SUSE-SU-2026:22636-1 - CVE Scans - 2026-11-13

Last scan: 2026-11-13T01:12:43Z

Go to the main page | Go to CVE index

Advisory: https://www.suse.com/support/update/announcement/2026/suse-su-202622636-1

The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".

Image Release Binary/Package Dependency Patched version Severity Status Justification (for status not affected)
rancher/harvester-kubeovn-operator:v1.15.4-r2 Harvester v1.8-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Harvester v1.8-head libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/harvester-kubeovn-operator:v1.15.4-r2 Harvester v1.8.2 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Harvester v1.8.2 libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.12-head libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.12.15 libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.13-head libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.13.11 libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.14-head libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.14.7 libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.15-head libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.15.3 libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.16-head libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher v2.15-head libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher v2.15.3 libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher v2.16-head libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 RKE2 v1.34.13 libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 RKE2 v1.35.10 libxml2-tools libxml2-tools@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH affected
rancher/nginx-ingress-controller:v1.14.5-hardened2 Harvester v1.8-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Harvester v1.8.2 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/harvester-csi-driver:v0.2.8 Rancher Prime v2.12-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/harvester-csi-driver:v0.2.9 Rancher Prime v2.12-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.12-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/harvester-csi-driver:v0.2.8 Rancher Prime v2.12.15 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/harvester-csi-driver:v0.2.9 Rancher Prime v2.12.15 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.12.15 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.13-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.13.11 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.14-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.14.7 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.15-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.15.3 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher Prime v2.16-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher v2.15-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher v2.15.3 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 Rancher v2.16-head libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 RKE2 v1.34.13 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
rancher/nginx-ingress-controller:v1.14.5-hardened2 RKE2 v1.35.10 libxml2-2 libxml2-2@2.13.8-160000.4.1 2.13.8-160000.5.1 HIGH not affected vulnerable code not in execute path
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.0.2 Rancher AI v1.0.3 libxml2-2 libxml2-2@2.10.3-150500.5.17.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/backing-image-manager:v1.11.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/backing-image-manager:v1.11.3 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/backing-image-manager:v1.11.3 Longhorn v1.11.3 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-cli:v1.11.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-cli:v1.11.3 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-cli:v1.11.3 Longhorn v1.11.3 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-engine:v1.11.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-engine:v1.11.3 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-engine:v1.11.3 Longhorn v1.11.3 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-instance-manager:v1.11.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-instance-manager:v1.11.3 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-instance-manager:v1.11.3 Longhorn v1.11.3 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-manager:v1.11.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-manager:v1.11.3 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-manager:v1.11.3 Longhorn v1.11.3 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-share-manager:v1.11.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-share-manager:v1.11.3 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-share-manager:v1.11.3 Longhorn v1.11.3 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-ui:v1.11.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-ui:v1.11.2 Harvester v1.8.2 libxml2-tools libxml2-tools@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-ui:v1.11.3 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-ui:v1.11.3 Harvester v1.8-head libxml2-tools libxml2-tools@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-ui:v1.11.3 Longhorn v1.11.3 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-ui:v1.11.3 Longhorn v1.11.3 libxml2-tools libxml2-tools@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-ui:v1.11.x-head Longhorn v1.11-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/longhorn-ui:v1.11.x-head Longhorn v1.11-head libxml2-tools libxml2-tools@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/support-bundle-kit:v0.0.84 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/support-bundle-kit:v0.0.88 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
longhornio/support-bundle-kit:v0.0.88 Longhorn v1.11.3 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
rancher/fleet:v0.15.4 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
rancher/fleet:v0.15.4 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 Rancher Prime v2.12-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 Rancher Prime v2.12.15 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 Rancher Prime v2.13-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
rancher/hardened-kubernetes:v1.32.13-rke2r1-build20260227 Rancher Prime v2.13.11 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
rancher/rancher-agent:v2.14.3 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
rancher/rancher-agent:v2.14.3 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-apiserver:1.64.0-150700.9.11.1 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-apiserver:1.64.0-150700.9.11.1 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-cloner:1.64.0-150700.9.11.1 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-cloner:1.64.0-150700.9.11.1 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-controller:1.64.0-150700.9.11.1 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-controller:1.64.0-150700.9.11.1 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-importer:1.64.0-150700.9.11.1 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-importer:1.64.0-150700.9.11.1 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-operator:1.64.0-150700.9.11.1 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-operator:1.64.0-150700.9.11.1 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-uploadproxy:1.64.0-150700.9.11.1 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-uploadproxy:1.64.0-150700.9.11.1 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-uploadserver:1.64.0-150700.9.11.1 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/cdi-uploadserver:1.64.0-150700.9.11.1 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/libguestfs-tools:1.7.4-150700.3.24.2 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/libguestfs-tools:1.7.4-150700.3.24.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/virt-api:1.7.4-150700.3.24.2 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/virt-api:1.7.4-150700.3.24.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/virt-controller:1.7.4-150700.3.24.2 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/virt-controller:1.7.4-150700.3.24.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/virt-handler:1.7.4-150700.3.24.2 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/virt-handler:1.7.4-150700.3.24.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/virt-launcher:1.7.4-150700.3.24.2 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/virt-launcher:1.7.4-150700.3.24.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/virt-operator:1.7.4-150700.3.24.2 Harvester v1.8-head libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected
registry.suse.com/suse/sles/15.7/virt-operator:1.7.4-150700.3.24.2 Harvester v1.8.2 libxml2-2 libxml2-2@2.12.10-150700.4.11.1 2.13.8-160000.5.1 HIGH not affected version of the dependency not affected