Images CVE Scans
SUSE Cloud Native - Harvester master version - CVE Scans - 2026-11-13
How to use this page
- Use the search bar below to filter the results by image (and version/tag), if the image is mirrored or made by SUSE (true/false), release, affected binary, vulnerable dependency (and its version), vulnerability ID (CVE, GHSA, SUSE-SU etc.), severity, status (if affected or not affected/false-positive), justification (for false-positives), vulnerability type (related to the programming language or container OS).
- The search functionality might execute a bit slow depending on the number of vulnerabilities displayed in the page.
- False-positive CVEs that are removed with VEX have the status as "not affected", because they do not affect the binary/package/image. The justification explains why they are false-positives, according to the VEX statuses as explained in KB 000021573.
- For further instructions about scanned versions, scanning frequency, tooling and false-positives, please consult the main instructions.
- The severity (CVSS rating) of some CVEs in the portal might differ from the original severity reported by some vendors and security scanners. This happens, because SUSE recalculates the CVSS rating of CVEs based on criteria, like: applicability and difficulty of the issue being exploited in the wild; how it can actually affect the confidentiality, integrity and availability of SUSE's products etc. CVEs that had their CVSS severity rating changed, either decreased or increased, will have the distinctive tag '*' close to its severity.
- Only critical and high severity CVEs are displayed (internally we track all severities).
Search:
| Image | Mirrored | Release | Binary/Package | Dependency | Patched version | Vulnerability ID (CVE) | Severity | Status | Justification (for status not affected) | Type (language or OS) |
|---|---|---|---|---|---|---|---|---|---|---|
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CVE-2025-68121 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CVE-2025-68121 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CVE-2025-68121 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CVE-2025-68121 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.9, 1.26.2 | CVE-2026-32280 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.9, 1.26.2 | CVE-2026-32280 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.9, 1.26.2 | CVE-2026-32280 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.9, 1.26.2 | CVE-2026-32280 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | golang.org/x/net@v0.49.0 | 0.53.0 | CVE-2026-33814 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | golang.org/x/net@v0.49.0 | 0.53.0 | CVE-2026-33814 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | golang.org/x/net@v0.49.0 | 0.53.0 | CVE-2026-33814 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | golang.org/x/net@v0.49.0 | 0.53.0 | CVE-2026-33814 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-33814 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-33814 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-33814 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-33814 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-39821 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-39821 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-39821 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-39821 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-39836 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-39836 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-39836 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-39836 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | golang.org/x/net@v0.49.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-bfdd-supervisor | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/gobgp | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-bfdd-supervisor | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | github.com/cert-manager/cert-manager@v1.20.1 | 1.19.6, 1.20.3 | CVE-2026-62290 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/gobgp | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-bfdd-supervisor | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/gobgp | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/gobgp | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-bfdd-supervisor | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/gobgp | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-bfdd-supervisor | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/gobgp | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | libssl3t64 | libssl3t64@3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | CVE-2026-84782 | HIGH | affected | ubuntu | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | libssl3t64-fips | libssl3t64-fips@3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | CVE-2026-84782 | HIGH | affected | ubuntu | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | openssl | openssl@3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | CVE-2026-84782 | HIGH | affected | ubuntu | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-bfdd-supervisor | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/gobgp | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-bfdd-supervisor | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/gobgp | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | libexpat1 | libexpat1@2.7.1-150700.3.12.1 | 2.8.5-150700.3.15.1 | SUSE-SU-2026:4619-1 | CRITICAL | affected | sles | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | glibc | glibc@2.38-150600.14.58.1 | 2.38-150600.14.61.1 | SUSE-SU-2026:4656-1 | HIGH | affected | sles | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | libopenssl1_1 | libopenssl1_1@1.1.1w-150700.11.30.1 | 1.1.1w-150700.11.35.1 | SUSE-SU-2026:5172-1 | HIGH | affected | sles | |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | stdlib@v1.26.6 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | stdlib@v1.26.6 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | google.golang.org/grpc@v1.81.1 | 1.83.1 | CVE-2026-84304 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | google.golang.org/grpc@v1.81.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | CVE-2026-84445 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | google.golang.org/grpc@v1.81.1 | 1.82.1 | GHSA-hrxh-6v49-42gf | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | google.golang.org/grpc@v1.79.3 | 1.83.1 | CVE-2026-84304 | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | google.golang.org/grpc@v1.79.3 | 1.82.1 | GHSA-hrxh-6v49-42gf | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | golang.org/x/net@v0.54.0 | 0.55.0 | CVE-2026-39821 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | golang.org/x/net@v0.54.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | golang.org/x/net@v0.54.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | golang.org/x/net@v0.54.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | google.golang.org/grpc@v1.81.1 | 1.83.1 | CVE-2026-84304 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | google.golang.org/grpc@v1.81.1 | 1.82.1 | GHSA-hrxh-6v49-42gf | HIGH | affected | gobinary | |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | stdlib@v1.26.6 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | glibc | glibc@2.38-150600.14.58.1 | 2.38-150600.14.61.1 | SUSE-SU-2026:4656-1 | HIGH | affected | sles | |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.5 | CVE-2026-116585 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.5 | CVE-2026-116586 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.6 | CVE-2026-116587 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | glibc | glibc@2.38-150600.14.58.1 | 2.38-150600.14.61.1 | SUSE-SU-2026:4656-1 | HIGH | affected | sles | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | cifs-utils | cifs-utils@6.15-150400.3.24.1 | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 | HIGH | affected | sles | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | libopenssl1_1 | libopenssl1_1@1.1.1w-150700.11.30.1 | 1.1.1w-150700.11.35.1 | SUSE-SU-2026:5172-1 | HIGH | affected | sles | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.5 | CVE-2026-116585 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.5 | CVE-2026-116586 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.6 | CVE-2026-116587 | HIGH | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/go-spdk-helper | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/go-spdk-helper | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | Python | uv@0.12.20 | 0.13.4 | GHSA-hq85-5cpj-mr62 | CRITICAL | affected | python-pkg | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libopenssl-3-fips-provider | libopenssl-3-fips-provider@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | affected | sles | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libopenssl3 | libopenssl3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | affected | sles | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | openssl-3 | openssl-3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | affected | sles | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | glibc | glibc@2.38-150600.14.58.1 | 2.38-150600.14.61.1 | SUSE-SU-2026:4656-1 | HIGH | affected | sles | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | cifs-utils | cifs-utils@6.15-150400.3.24.1 | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 | HIGH | affected | sles | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libpython3_11-1_0 | libpython3_11-1_0@3.11.15-150600.3.65.1 | 3.11.17-150600.3.74.1 | SUSE-SU-2026:4946-1 | HIGH | affected | sles | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | python311-base | python311-base@3.11.15-150600.3.65.1 | 3.11.17-150600.3.74.1 | SUSE-SU-2026:4946-1 | HIGH | affected | sles | |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libopenssl1_1 | libopenssl1_1@1.1.1w-150700.11.30.1 | 1.1.1w-150700.11.35.1 | SUSE-SU-2026:5172-1 | HIGH | affected | sles | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | glibc | glibc@2.38-150600.14.58.1 | 2.38-150600.14.61.1 | SUSE-SU-2026:4656-1 | HIGH | affected | sles | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | cifs-utils | cifs-utils@6.15-150400.3.24.1 | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 | HIGH | affected | sles | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | libopenssl1_1 | libopenssl1_1@1.1.1w-150700.11.30.1 | 1.1.1w-150700.11.35.1 | SUSE-SU-2026:5172-1 | HIGH | affected | sles | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | libopenssl-3-fips-provider | libopenssl-3-fips-provider@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | affected | sles | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | libopenssl3 | libopenssl3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | affected | sles | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | openssl-3 | openssl-3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | affected | sles | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | glibc | glibc@2.38-150600.14.58.1 | 2.38-150600.14.61.1 | SUSE-SU-2026:4656-1 | HIGH | affected | sles | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | curl | curl@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | affected | sles | |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | libcurl4 | libcurl4@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | affected | sles | |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | libopenssl-3-fips-provider | libopenssl-3-fips-provider@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | affected | sles | |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | libopenssl3 | libopenssl3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | affected | sles | |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | openssl-3 | openssl-3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | affected | sles | |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | glibc | glibc@2.38-150600.14.58.1 | 2.38-150600.14.61.1 | SUSE-SU-2026:4656-1 | HIGH | affected | sles | |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/yq | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/yq | stdlib@v1.27.0 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/yq | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/yq | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/yq | stdlib@v1.27.0 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/support-bundle-kit | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | glibc | glibc@2.38-150600.14.58.1 | 2.38-150600.14.61.1 | SUSE-SU-2026:4656-1 | HIGH | affected | sles | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | curl | curl@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | affected | sles | |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | libcurl4 | libcurl4@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | affected | sles | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.10, 1.26.3 | CVE-2026-33811 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.10, 1.26.3 | CVE-2026-39836 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | google.golang.org/grpc@v1.80.0 | 1.83.1 | CVE-2026-84304 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | google.golang.org/grpc@v1.80.0 | 1.82.1 | GHSA-hrxh-6v49-42gf | HIGH | affected | gobinary | |
| rancher/hardened-calico:v3.32.2-build20261022 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/hardened-etcd:v3.6.14-k3s3-build20261020 | false | Harvester master | usr/local/bin/etcd | github.com/klauspost/compress@v1.18.0 | 1.18.7 | CVE-2026-63209 | HIGH | affected | gobinary | |
| rancher/hardened-flannel:v0.28.10-build20261022 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/harvester-kubeovn-operator:v1.16.4-dev.1 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/harvester-networkfs-manager:main-head | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/harvester-node-disk-manager-webhook:master-head | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/harvester-node-disk-manager:master-head | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/harvester-node-manager-webhook:master-head | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/harvester-node-manager:master-head | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/harvester-seeder:main-head | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.40.0 | CVE-2026-24051 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/text@v0.14.0 | 0.41.0 | CVE-2026-56851 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.56.0 | CVE-2026-56855 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/klauspost/compress@v1.17.6 | 1.18.7 | CVE-2026-63209 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | github.com/klauspost/compress@v1.18.0 | 1.18.7 | CVE-2026-63209 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/net@v0.20.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/net@v0.44.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/yq | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/net@v0.20.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/net@v0.44.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/yq | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.56.0 | CVE-2026-78662 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/net@v0.20.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/net@v0.44.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/yq | golang.org/x/net@v0.59.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/virtctl | stdlib@v1.26.4 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/harvester-webhook:master-head | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/harvester:master-head | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/klipper-helm:v0.13.3-build20261021 | false | Harvester master | musl | musl@1.2.6-r2 | 1.2.6-r3 | CVE-2026-107891 | HIGH | affected | alpine | |
| rancher/klipper-helm:v0.13.3-build20261021 | false | Harvester master | musl-utils | musl-utils@1.2.6-r2 | 1.2.6-r3 | CVE-2026-107891 | HIGH | affected | alpine | |
| rancher/klipper-lb:v0.4.17 | false | Harvester master | musl | musl@1.2.5-r23 | 1.2.5-r24 | CVE-2026-107891 | HIGH | affected | alpine | |
| rancher/klipper-lb:v0.4.17 | false | Harvester master | musl-utils | musl-utils@1.2.5-r23 | 1.2.5-r24 | CVE-2026-107891 | HIGH | affected | alpine | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | golang.org/x/text@v0.40.0 | 0.41.0 | CVE-2026-56851 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | golang.org/x/net@v0.57.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | golang.org/x/net@v0.57.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | golang.org/x/net@v0.57.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.3.1 | 10.45-160000.4.1 | SUSE-SU-2026:23906-1 | HIGH | affected | sles | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | glibc | glibc@2.40-160000.6.1 | 2.40-160000.7.1 | SUSE-SU-2026:23934-1 | HIGH | affected | sles | |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.3.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libldap-2.5-0 | libldap-2.5-0@2.5.13+dfsg-5 | CVE-2023-2953 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.9-0+deb12u1 | CVE-2024-10979 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.11-0+deb12u1 | CVE-2025-1094 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libssl3 | libssl3@3.0.14-1~deb12u2 | 3.0.18-1~deb12u2 | CVE-2025-15467 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | liblzma5 | liblzma5@5.4.1-0.2 | 5.4.1-1 | CVE-2025-31115 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgnutls30 | libgnutls30@3.7.9-2+deb12u3 | 3.7.9-2+deb12u5 | CVE-2025-32988 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgnutls30 | libgnutls30@3.7.9-2+deb12u3 | 3.7.9-2+deb12u5 | CVE-2025-32990 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libssl3 | libssl3@3.0.14-1~deb12u2 | 3.0.18-1~deb12u2 | CVE-2025-69421 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2025-8714 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.14-0+deb12u1 | CVE-2025-8715 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-107364 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-107364 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-107364 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-107364 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-112315 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-112315 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-112315 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-112315 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-112316 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-112316 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-112316 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-112316 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-112317 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-112317 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-112317 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-112317 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-112318 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-112318 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-112318 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-112318 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-112319 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-112319 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-112319 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-112319 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-112320 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-112320 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-112320 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-112320 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-112321 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-112321 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-112321 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-112321 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-112322 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-112322 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-112322 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-112322 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-112323 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-112323 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-112323 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-112323 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-118380 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-118380 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-118380 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-118380 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-119079 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-119079 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-119079 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-119079 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-14662 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-14664 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-14668 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-14669 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-14670 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-14671 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-14677 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-14679 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-14680 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-15741 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-15742 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-16239 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libsystemd0 | libsystemd0@254.16-1~bpo12+1 | CVE-2026-16742 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-18408 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-19385 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.16-0+deb12u1 | CVE-2026-2004 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.16-0+deb12u1 | CVE-2026-2005 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.16-0+deb12u1 | CVE-2026-2006 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libssl3 | libssl3@3.0.14-1~deb12u2 | 3.0.19-1~deb12u2 | CVE-2026-28387 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libssl3 | libssl3@3.0.14-1~deb12u2 | 3.0.19-1~deb12u2 | CVE-2026-28388 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libssl3 | libssl3@3.0.14-1~deb12u2 | 3.0.19-1~deb12u2 | CVE-2026-28389 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libssl3 | libssl3@3.0.14-1~deb12u2 | 3.0.19-1~deb12u2 | CVE-2026-28390 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libssl3 | libssl3@3.0.14-1~deb12u2 | 3.0.19-1~deb12u2 | CVE-2026-31789 | CRITICAL | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgnutls30 | libgnutls30@3.7.9-2+deb12u3 | 3.7.9-2+deb12u7 | CVE-2026-33845 | CRITICAL | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgnutls30 | libgnutls30@3.7.9-2+deb12u3 | 3.7.9-2+deb12u7 | CVE-2026-33846 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgnutls30 | libgnutls30@3.7.9-2+deb12u3 | 3.7.9-2+deb12u7 | CVE-2026-3833 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | 1.20.1-2+deb12u5 | CVE-2026-40355 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | 1.20.1-2+deb12u5 | CVE-2026-40355 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | 1.20.1-2+deb12u5 | CVE-2026-40355 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | 1.20.1-2+deb12u5 | CVE-2026-40355 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | 1.20.1-2+deb12u5 | CVE-2026-40356 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | 1.20.1-2+deb12u5 | CVE-2026-40356 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | 1.20.1-2+deb12u5 | CVE-2026-40356 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | 1.20.1-2+deb12u5 | CVE-2026-40356 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgnutls30 | libgnutls30@3.7.9-2+deb12u3 | 3.7.9-2+deb12u7 | CVE-2026-42009 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgnutls30 | libgnutls30@3.7.9-2+deb12u3 | 3.7.9-2+deb12u7 | CVE-2026-42010 | CRITICAL | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libssl3 | libssl3@3.0.14-1~deb12u2 | 3.0.20-1~deb12u2 | CVE-2026-45447 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-6464 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-6471 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.19-0+deb12u1 | CVE-2026-6473 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.18-0+deb12u1 | CVE-2026-6477 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.18-0+deb12u1 | CVE-2026-6478 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.18-0+deb12u1 | CVE-2026-6479 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libpq5 | libpq5@15.8-0+deb12u1 | 15.18-0+deb12u1 | CVE-2026-6637 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-71199 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-71199 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-71199 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-71199 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libgssapi-krb5-2 | libgssapi-krb5-2@1.20.1-2+deb12u2 | CVE-2026-71200 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libk5crypto3 | libk5crypto3@1.20.1-2+deb12u2 | CVE-2026-71200 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5-3 | libkrb5-3@1.20.1-2+deb12u2 | CVE-2026-71200 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libkrb5support0 | libkrb5support0@1.20.1-2+deb12u2 | CVE-2026-71200 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | zlib1g | zlib1g@1:1.2.13.dfsg-1 | CVE-2026-76844 | HIGH | affected | debian | ||
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libssl3 | libssl3@3.0.14-1~deb12u2 | 3.0.22-1~deb12u2 | CVE-2026-84782 | HIGH | affected | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | zlib1g | zlib1g@1:1.2.13.dfsg-1 | CVE-2026-85091 | HIGH | affected | debian | ||
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | google.golang.org/protobuf@v1.28.1 | 1.33.0 | CVE-2024-24786 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.24.8, 1.25.2 | CVE-2025-47912 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.24.8, 1.25.2 | CVE-2025-58188 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.24.11, 1.25.5 | CVE-2025-61727 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.24.11, 1.25.5 | CVE-2025-61729 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CVE-2025-68121 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.9, 1.26.2 | CVE-2026-32280 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.10, 1.26.3 | CVE-2026-33811 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.10, 1.26.3 | CVE-2026-33814 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.10, 1.26.3 | CVE-2026-39820 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.10, 1.26.3 | CVE-2026-39836 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.10, 1.26.3 | CVE-2026-42499 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-config-reloader:v0.0.6 | true | Harvester master | config-reloader | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libcrypto3 | libcrypto3@3.3.2-r1 | 3.3.3-r0 | CVE-2024-12797 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libssl3 | libssl3@3.3.2-r1 | 3.3.3-r0 | CVE-2024-12797 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rexml@3.2.6 | >= 3.3.9 | CVE-2024-49761 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rexml@3.3.2 | >= 3.3.9 | CVE-2024-49761 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | google-protobuf@3.21.12 | ~> 3.25.5, ~> 4.27.5, >= 4.28.2 | CVE-2024-7254 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libcrypto3 | libcrypto3@3.3.2-r1 | 3.3.6-r0 | CVE-2025-15467 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libssl3 | libssl3@3.3.2-r1 | 3.3.6-r0 | CVE-2025-15467 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | musl | musl@1.2.5-r0 | 1.2.5-r1 | CVE-2025-26519 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | musl-utils | musl-utils@1.2.5-r0 | 1.2.5-r1 | CVE-2025-26519 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.12, ~> 3.0.13, >= 3.1.11 | CVE-2025-27111 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | ruby | ruby@3.3.6-r0 | 3.3.8-r0 | CVE-2025-27219 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | ruby-libs | ruby-libs@3.3.6-r0 | 3.3.8-r0 | CVE-2025-27219 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.13, ~> 3.0.14, >= 3.1.12 | CVE-2025-27610 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.14, ~> 3.0.16, >= 3.1.14 | CVE-2025-46727 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | ruby | ruby@3.3.6-r0 | 3.3.10-r0 | CVE-2025-61594 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | ruby-libs | ruby-libs@3.3.6-r0 | 3.3.10-r0 | CVE-2025-61594 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | uri@0.12.2 | ~> 0.12.5, ~> 0.13.3, >= 1.0.4 | CVE-2025-61594 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.19, ~> 3.1.17, >= 3.2.2 | CVE-2025-61770 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.19, ~> 3.1.17, >= 3.2.2 | CVE-2025-61771 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.19, ~> 3.1.17, >= 3.2.2 | CVE-2025-61772 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.20, ~> 3.1.18, >= 3.2.3 | CVE-2025-61919 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libcrypto3 | libcrypto3@3.3.2-r1 | 3.3.6-r0 | CVE-2025-69421 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libssl3 | libssl3@3.3.2-r1 | 3.3.6-r0 | CVE-2025-69421 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | musl | musl@1.2.5-r0 | 1.2.5-r4 | CVE-2026-107891 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | musl-utils | musl-utils@1.2.5-r0 | 1.2.5-r4 | CVE-2026-107891 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | 2.2.25, 3.1.23, 3.2.8 | CVE-2026-125111 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | activesupport@7.1.1 | 8.1.4.1, 8.0.5.2 | CVE-2026-126080 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | zlib | zlib@1.3.1-r1 | 1.3.2-r0 | CVE-2026-22184 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.22, ~> 3.1.20, >= 3.2.5 | CVE-2026-22860 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | zlib@3.0.0 | ~> 3.0.1, ~> 3.1.2, >= 3.2.3 | CVE-2026-27820 | CRITICAL | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libcrypto3 | libcrypto3@3.3.2-r1 | 3.3.7-r0 | CVE-2026-28387 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libssl3 | libssl3@3.3.2-r1 | 3.3.7-r0 | CVE-2026-28387 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libcrypto3 | libcrypto3@3.3.2-r1 | 3.3.7-r0 | CVE-2026-28388 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libssl3 | libssl3@3.3.2-r1 | 3.3.7-r0 | CVE-2026-28388 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libcrypto3 | libcrypto3@3.3.2-r1 | 3.3.7-r0 | CVE-2026-28389 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libssl3 | libssl3@3.3.2-r1 | 3.3.7-r0 | CVE-2026-28389 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libcrypto3 | libcrypto3@3.3.2-r1 | 3.3.7-r0 | CVE-2026-28390 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libssl3 | libssl3@3.3.2-r1 | 3.3.7-r0 | CVE-2026-28390 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libcrypto3 | libcrypto3@3.3.2-r1 | 3.3.7-r0 | CVE-2026-31789 | CRITICAL | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | libssl3 | libssl3@3.3.2-r1 | 3.3.7-r0 | CVE-2026-31789 | CRITICAL | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | activesupport@7.1.1 | ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 | CVE-2026-33176 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.23, ~> 3.1.21, >= 3.2.6 | CVE-2026-34785 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 3.1.21, >= 3.2.6 | CVE-2026-34827 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.23, ~> 3.1.21, >= 3.2.6 | CVE-2026-34829 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | addressable@2.8.5 | >= 2.9.0 | CVE-2026-35611 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | addressable@2.8.6 | >= 2.9.0 | CVE-2026-35611 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | musl | musl@1.2.5-r0 | 1.2.5-r3 | CVE-2026-40200 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | musl-utils | musl-utils@1.2.5-r0 | 1.2.5-r3 | CVE-2026-40200 | HIGH | affected | alpine | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | erb@4.0.2 | ~> 4.0.3.1, ~> 4.0.4.1, ~> 6.0.1.1, >= 6.0.4 | CVE-2026-41316 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | net-imap@0.3.4.1 | ~> 0.4.24, ~> 0.5.14, >= 0.6.4 | CVE-2026-42245 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | net-imap@0.4.2 | ~> 0.4.24, ~> 0.5.14, >= 0.6.4 | CVE-2026-42245 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | net-imap@0.3.4.1 | ~> 0.3.10, ~> 0.4.24, ~> 0.5.14, >= 0.6.4 | CVE-2026-42246 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | net-imap@0.4.2 | ~> 0.3.10, ~> 0.4.24, ~> 0.5.14, >= 0.6.4 | CVE-2026-42246 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | net-imap@0.3.4.1 | ~> 0.4.24, ~> 0.5.14, >= 0.6.4 | CVE-2026-42258 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | net-imap@0.4.2 | ~> 0.4.24, ~> 0.5.14, >= 0.6.4 | CVE-2026-42258 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.3 | >= 1.19.3 | CVE-2026-44024 | CRITICAL | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.5 | >= 1.19.3 | CVE-2026-44024 | CRITICAL | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.6 | >= 1.19.3 | CVE-2026-44024 | CRITICAL | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.3 | >= 1.19.3 | CVE-2026-44025 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.5 | >= 1.19.3 | CVE-2026-44025 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.6 | >= 1.19.3 | CVE-2026-44025 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.3 | >= 1.19.3 | CVE-2026-44160 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.5 | >= 1.19.3 | CVE-2026-44160 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.6 | >= 1.19.3 | CVE-2026-44160 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.3 | >= 1.19.3 | CVE-2026-44161 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.5 | >= 1.19.3 | CVE-2026-44161 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.6 | >= 1.19.3 | CVE-2026-44161 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | jwt@2.9.3 | ~> 2.10.3, >= 3.2.0 | CVE-2026-45363 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | faraday@1.10.3 | ~> 1.10.6, >= 2.14.3 | CVE-2026-54297 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | faraday@2.7.12 | ~> 1.10.6, >= 2.14.3 | CVE-2026-54297 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | oj@3.16.1 | >= 3.17.3 | CVE-2026-54592 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | oj@3.16.1 | >= 3.17.3 | CVE-2026-54896 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | oj@3.16.1 | >= 3.17.3 | CVE-2026-54897 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | oj@3.16.1 | >= 3.17.3 | CVE-2026-54900 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | oj@3.16.1 | >= 3.17.3 | CVE-2026-54903 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | concurrent-ruby@1.1.10 | >= 1.3.7 | CVE-2026-54904 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | concurrent-ruby@1.2.3 | >= 1.3.7 | CVE-2026-54904 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | concurrent-ruby@1.3.4 | >= 1.3.7 | CVE-2026-54904 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | concurrent-ruby@1.1.10 | >= 1.3.7 | CVE-2026-54906 | CRITICAL | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | concurrent-ruby@1.2.3 | >= 1.3.7 | CVE-2026-54906 | CRITICAL | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | concurrent-ruby@1.3.4 | >= 1.3.7 | CVE-2026-54906 | CRITICAL | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | nokogiri@1.16.6 | >= 1.19.3 | CVE-2026-79770 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | resolv@0.2.2 | ~> 0.3.2, >= 0.7.2 | CVE-2026-80212 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | nokogiri@1.16.6 | >= 1.18.9 | GHSA-353f-x4gh-cqq8 | CRITICAL | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.3 | >= 1.19.4 | GHSA-5hq3-r276-rfr5 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.5 | >= 1.19.4 | GHSA-5hq3-r276-rfr5 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.6 | >= 1.19.4 | GHSA-5hq3-r276-rfr5 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | rack@3.0.9.1 | ~> 2.2.25, ~> 3.1.23, >= 3.2.8 | GHSA-5v64-555j-wjxm | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | activesupport@7.1.1 | ~> 8.0.5, >= 8.0.5.2, >= 8.1.4.1 | GHSA-8474-xrp6-wh69 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.3 | >= 1.19.4 | GHSA-g69w-f42r-xp35 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.5 | >= 1.19.4 | GHSA-g69w-f42r-xp35 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.6 | >= 1.19.4 | GHSA-g69w-f42r-xp35 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.3 | >= 1.19.4 | GHSA-h3xv-5jpx-r4j2 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.5 | >= 1.19.4 | GHSA-h3xv-5jpx-r4j2 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | fluentd@1.16.6 | >= 1.19.4 | GHSA-h3xv-5jpx-r4j2 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | nokogiri@1.16.6 | >= 1.18.4 | GHSA-mrxw-mxhj-p664 | HIGH | affected | gemspec | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.24.8, 1.25.2 | CVE-2025-47912 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.24.8, 1.25.2 | CVE-2025-58188 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.24.11, 1.25.5 | CVE-2025-61727 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.24.11, 1.25.5 | CVE-2025-61729 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CVE-2025-68121 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.9, 1.26.2 | CVE-2026-32280 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/net@v0.29.0 | 0.53.0 | CVE-2026-33814 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.10, 1.26.3 | CVE-2026-33814 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/net@v0.29.0 | 0.55.0 | CVE-2026-39821 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.10, 1.26.3 | CVE-2026-39836 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | github.com/klauspost/compress@v1.17.9 | 1.18.7 | CVE-2026-63209 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/net@v0.29.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/net@v0.29.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/net@v0.29.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | musl | musl@1.2.6-r2 | 1.2.6-r3 | CVE-2026-107891 | HIGH | affected | alpine | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | musl-utils | musl-utils@1.2.6-r2 | 1.2.6-r3 | CVE-2026-107891 | HIGH | affected | alpine | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | golang.org/x/crypto@v0.55.0 | 0.56.0 | CVE-2026-56855 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | golang.org/x/crypto@v0.55.0 | 0.56.0 | CVE-2026-78662 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | zlib | zlib@1.3.2-r0 | 1.3.2-r1 | CVE-2026-85091 | HIGH | affected | alpine | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/rancher-agent:v2.15.3 | false | Harvester master | usr/bin/agent | github.com/go-jose/go-jose/v3@v3.0.5 | CVE-2026-116585 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | ||
| rancher/rancher-agent:v2.15.3 | false | Harvester master | usr/bin/agent | github.com/go-jose/go-jose/v3@v3.0.5 | CVE-2026-116586 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | ||
| rancher/rancher-agent:v2.15.3 | false | Harvester master | usr/bin/agent | github.com/go-jose/go-jose/v3@v3.0.5 | CVE-2026-116587 | HIGH | affected | gobinary | ||
| rancher/rancher-agent:v2.15.3 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| rancher/rancher-agent:v2.15.3 | false | Harvester master | curl | curl@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | affected | sles | |
| rancher/rancher-agent:v2.15.3 | false | Harvester master | libcurl4 | libcurl4@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | affected | sles | |
| rancher/rancher-webhook:v0.11.4 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.3.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/bandwidth | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/cni | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/firewall | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/rancher | github.com/go-jose/go-jose/v3@v3.0.5 | CVE-2026-116585 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | ||
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.5 | CVE-2026-116585 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.5 | CVE-2026-116585 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/rancher | github.com/go-jose/go-jose/v3@v3.0.5 | CVE-2026-116586 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | ||
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.5 | CVE-2026-116586 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.5 | CVE-2026-116586 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/rancher | github.com/go-jose/go-jose/v3@v3.0.5 | CVE-2026-116587 | HIGH | affected | gobinary | ||
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.6 | CVE-2026-116587 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.6 | CVE-2026-116587 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/net@v0.51.0 | 0.53.0 | CVE-2026-33814 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | github.com/docker/docker@v25.0.15-0.20260325154711-d2dbc0547253+incompatible | 29.3.1 | CVE-2026-33997 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | github.com/docker/docker@v25.0.15-0.20260325154711-d2dbc0547253+incompatible | 29.3.1 | CVE-2026-33997 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/bandwidth | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/cni | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/firewall | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | golang.org/x/net@v0.43.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/net@v0.51.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | golang.org/x/net@v0.52.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/bandwidth | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/cni | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/firewall | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | golang.org/x/net@v0.43.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/net@v0.51.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | golang.org/x/net@v0.52.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/bandwidth | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/cni | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/firewall | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/bandwidth | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/cni | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/firewall | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | golang.org/x/net@v0.43.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/net@v0.51.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | golang.org/x/net@v0.52.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/net@v0.55.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/bandwidth | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/cni | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/firewall | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | google.golang.org/grpc@v1.79.3 | 1.83.1 | CVE-2026-84304 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | google.golang.org/grpc@v1.80.0 | 1.83.1 | CVE-2026-84304 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | google.golang.org/grpc@v1.80.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | CVE-2026-84445 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/bandwidth | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/cni | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/firewall | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | github.com/containerd/containerd/v2@v2.3.4-k3s1.36 | 2.2.7, 2.3.4 | CVE-2026-95837 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/bandwidth | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/cni | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/firewall | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | google.golang.org/grpc@v1.79.3 | 1.82.1 | GHSA-hrxh-6v49-42gf | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | google.golang.org/grpc@v1.80.0 | 1.82.1 | GHSA-hrxh-6v49-42gf | HIGH | affected | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| rancher/rancher:v2.15.3 | false | Harvester master | curl | curl@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | affected | sles | |
| rancher/rancher:v2.15.3 | false | Harvester master | libcurl4 | libcurl4@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | affected | sles | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.5 | CVE-2026-116585 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.5 | CVE-2026-116586 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | github.com/go-jose/go-jose/v4@v4.1.4 | 4.1.6 | CVE-2026-116587 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/net@v0.53.0 | 0.55.0 | CVE-2026-39821 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.52.0 | CVE-2026-39829 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.52.0 | CVE-2026-39831 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.52.0 | CVE-2026-39832 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.52.0 | CVE-2026-39834 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.52.0 | CVE-2026-39835 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.52.0 | CVE-2026-42508 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.52.0 | CVE-2026-46597 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | github.com/containerd/containerd/v2@v2.2.4 | 2.1.9, 2.2.5, 2.3.2 | CVE-2026-50195 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | github.com/containerd/containerd@v1.7.32 | 1.7.33 | CVE-2026-53488 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | github.com/containerd/containerd/v2@v2.2.4 | 2.0.10, 2.1.9, 2.2.5, 2.3.2 | CVE-2026-53488 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | github.com/containerd/containerd/v2@v2.2.4 | 2.1.9, 2.2.5, 2.3.2 | CVE-2026-53492 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.56.0 | CVE-2026-56855 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | github.com/klauspost/compress@v1.18.5 | 1.18.7 | CVE-2026-63209 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | github.com/go-git/go-git/v5@v5.19.1 | 5.19.2 | CVE-2026-71556 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/net@v0.53.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/helm | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/kubectl | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/net@v0.53.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/helm | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/kubectl | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.56.0 | CVE-2026-78662 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/net@v0.53.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/helm | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/kubectl | golang.org/x/net@v0.56.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | google.golang.org/grpc@v1.79.3 | 1.83.1 | CVE-2026-84304 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | google.golang.org/grpc@v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | CVE-2026-84445 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | oras.land/oras-go/v2@v2.6.0 | 2.6.2 | CVE-2026-85731 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/helm | oras.land/oras-go/v2@v2.6.1 | 2.6.2 | CVE-2026-85731 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | github.com/containerd/containerd/v2@v2.2.4 | 2.2.7, 2.3.4 | CVE-2026-95837 | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | google.golang.org/grpc@v1.79.3 | 1.82.1 | GHSA-hrxh-6v49-42gf | HIGH | affected | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.1.0-160000.2.2 | 1.1.0-160000.3.1 | SUSE-SU-2026:24601-1 | HIGH | affected | sles | |
| rancher/shell:v0.8.3 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.1.0-160000.2.2 | 1.1.0-160000.3.1 | SUSE-SU-2026:24601-1 | HIGH | affected | sles | |
| rancher/shell:v0.8.3 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| rancher/support-bundle-kit:master-head | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | affected | sles | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | golang.org/x/net@v0.53.0 | 0.55.0 | CVE-2026-39821 | HIGH | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | golang.org/x/net@v0.53.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | golang.org/x/net@v0.53.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | golang.org/x/net@v0.53.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | golang.org/x/net@v0.58.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | golang.org/x/net@v0.54.0 | 0.55.0 | CVE-2026-39821 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-56866 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | golang.org/x/net@v0.54.0 | 0.60.0 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78659 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | golang.org/x/net@v0.54.0 | 0.60.0 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78660 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | golang.org/x/net@v0.54.0 | 0.60.0 | CVE-2026-78669 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | google.golang.org/grpc@v1.81.1 | 1.83.1 | CVE-2026-84304 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-94440 | HIGH*Severity modified based on SUSE's CVE database and CVSS rating | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | affected | gobinary | |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | google.golang.org/grpc@v1.81.1 | 1.82.1 | GHSA-hrxh-6v49-42gf | HIGH | affected | gobinary | |
| registry.suse.com/bci/bci-base:16.0 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/cdi-apiserver:1.65.0 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/cdi-cloner:1.65.0 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/cdi-controller:1.65.0 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/cdi-importer:1.65.0 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/cdi-operator:1.65.0 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/cdi-uploadproxy:1.65.0 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/cdi-uploadserver:1.65.0 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/libguestfs-tools:1.9.0-2.14 | false | Harvester master | libexpat1 | libexpat1@2.8.4-160000.1.1 | 2.8.5-160000.1.1 | SUSE-SU-2026:24469-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/libguestfs-tools:1.9.0-2.14 | false | Harvester master | libsoup-3_0-0 | libsoup-3_0-0@3.6.6-160000.4.1 | 3.6.6-160000.5.1 | SUSE-SU-2026:24470-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/libguestfs-tools:1.9.0-2.14 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.1.0-160000.2.2 | 1.1.0-160000.3.1 | SUSE-SU-2026:24601-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/libguestfs-tools:1.9.0-2.14 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.1.0-160000.2.2 | 1.1.0-160000.3.1 | SUSE-SU-2026:24601-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/libguestfs-tools:1.9.0-2.14 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-api:1.9.0-2.14 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-controller:1.9.0-2.14 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-exportproxy:1.9.0-2.14 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-exportserver:1.9.0-2.14 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-handler:1.9.0-2.14 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.1.0-160000.2.2 | 1.1.0-160000.3.1 | SUSE-SU-2026:24601-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-handler:1.9.0-2.14 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.1.0-160000.2.2 | 1.1.0-160000.3.1 | SUSE-SU-2026:24601-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-handler:1.9.0-2.14 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-launcher:1.9.0-2.14 | false | Harvester master | libexpat1 | libexpat1@2.8.4-160000.1.1 | 2.8.5-160000.1.1 | SUSE-SU-2026:24469-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-launcher:1.9.0-2.14 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.1.0-160000.2.2 | 1.1.0-160000.3.1 | SUSE-SU-2026:24601-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-launcher:1.9.0-2.14 | false | Harvester master | libbrotlidec1 | libbrotlidec1@1.1.0-160000.2.2 | 1.1.0-160000.3.1 | SUSE-SU-2026:24601-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-launcher:1.9.0-2.14 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| registry.suse.com/suse/sles/16.0/virt-operator:1.9.0-2.14 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.4.1 | 10.45-160000.5.1 | SUSE-SU-2026:24654-1 | HIGH | affected | sles | |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | musl | musl@1.2.5-r23 | 1.2.5-r24 | CVE-2026-107891 | HIGH | not affected | vulnerable code not in execute path | alpine |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | musl-utils | musl-utils@1.2.5-r23 | 1.2.5-r24 | CVE-2026-107891 | HIGH | not affected | vulnerable code not in execute path | alpine |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | libcrypto3 | libcrypto3@3.5.6-r0 | 3.5.8-r0 | CVE-2026-14456 | HIGH | not affected | vulnerable code not in execute path | alpine |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | libssl3 | libssl3@3.5.6-r0 | 3.5.8-r0 | CVE-2026-14456 | HIGH | not affected | vulnerable code not in execute path | alpine |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | golang.org/x/net@v0.49.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-33811 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-33811 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-33811 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-33811 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-39820 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-39820 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-39820 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-39820 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-42499 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-42499 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-42499 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.10, 1.26.3 | CVE-2026-42499 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | libcrypto3 | libcrypto3@3.5.6-r0 | 3.5.7-r0 | CVE-2026-45447 | HIGH | not affected | vulnerable code not in execute path | alpine |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | libssl3 | libssl3@3.5.6-r0 | 3.5.7-r0 | CVE-2026-45447 | HIGH | not affected | vulnerable code not in execute path | alpine |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | golang.org/x/net@v0.49.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | golang.org/x/net@v0.49.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | golang.org/x/net@v0.49.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | golang.org/x/net@v0.49.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | golang.org/x/text@v0.33.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | golang.org/x/text@v0.33.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | golang.org/x/text@v0.33.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | golang.org/x/text@v0.33.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | golang.org/x/text@v0.33.0 | 0.39.0 | CVE-2026-56852 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | golang.org/x/text@v0.33.0 | 0.39.0 | CVE-2026-56852 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | golang.org/x/text@v0.33.0 | 0.39.0 | CVE-2026-56852 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | golang.org/x/text@v0.33.0 | 0.39.0 | CVE-2026-56852 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56858 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56858 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56858 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56858 | HIGH | not affected | vulnerable code not present | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-control-loop | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | ip-reconciler | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | node-slice-controller | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | whereabouts | stdlib@v1.25.6 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4 | false | Harvester master | zlib | zlib@1.3.2-r0 | 1.3.2-r1 | CVE-2026-85091 | HIGH | not affected | vulnerable code not in execute path | alpine |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | libapt-pkg6.0t64 | libapt-pkg6.0t64@2.8.3 | 2.8.4ubuntu0.1 | CVE-2026-109518 | HIGH | not affected | vulnerable code not in execute path | ubuntu |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | libbrotli1 | libbrotli1@1.1.0-2build2 | 1.1.0-2ubuntu0.1 | CVE-2026-111497 | HIGH | not affected | vulnerable code not in execute path | ubuntu |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | loopback | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | macvlan | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | portmap | stdlib@v1.27.1 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/kubectl | golang.org/x/text@v0.39.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-bfdd-supervisor | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-cmd | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-controller | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/kube-ovn-daemon | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | kube-ovn/vpc-egress-gateway-observer | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | loopback | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | macvlan | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | portmap | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | usr/bin/gobgp | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | loopback | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | macvlan | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | portmap | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | loopback | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | macvlan | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | not affected | vulnerable code not present | gobinary |
| kubeovn/kube-ovn:v1.16.4 | false | Harvester master | portmap | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | usr/local/bin/backing-image-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | libopenssl-3-fips-provider | libopenssl-3-fips-provider@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | libopenssl3 | libopenssl3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | openssl-3 | openssl-3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | rpcbind | rpcbind@0.2.3-150000.5.12.1 | 0.2.3-150000.5.17.1 | SUSE-SU-2026:4568-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | iperf | iperf@3.21-100.12 | 3.22-150000.3.18.1 | SUSE-SU-2026:4678-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | libiperf0 | libiperf0@3.21-100.12 | 3.22-150000.3.18.1 | SUSE-SU-2026:4678-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | libpython3_6m1_0 | libpython3_6m1_0@3.6.15-150300.10.118.1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | python3-base | python3-base@3.6.15-150300.10.118.1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | libsasl2-3 | libsasl2-3@2.1.28-150600.7.14.1 | 2.1.28-150600.7.17.1 | SUSE-SU-2026:4836-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | curl | curl@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/backing-image-manager:v1.13.0 | false | Harvester master | libcurl4 | libcurl4@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/csi-attacher:v4.13.0 | false | Harvester master | csi-attacher | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-node-driver-registrar:v2.18.0 | false | Harvester master | csi-node-driver-registrar | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.25.11, 1.26.4 | CVE-2026-27145 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.25.11, 1.26.4 | CVE-2026-42504 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | golang.org/x/net@v0.55.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | golang.org/x/text@v0.37.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | golang.org/x/crypto@v0.52.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-provisioner:v6.3.0 | false | Harvester master | csi-provisioner | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.25.11, 1.26.4 | CVE-2026-27145 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | go.opentelemetry.io/otel/sdk@v1.40.0 | 1.43.0 | CVE-2026-39883 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.25.11, 1.26.4 | CVE-2026-42504 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | golang.org/x/net@v0.55.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | golang.org/x/text@v0.38.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | golang.org/x/crypto@v0.53.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-resizer:v2.2.1 | false | Harvester master | csi-resizer | google.golang.org/grpc@v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | CVE-2026-84445 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | golang.org/x/net@v0.54.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | golang.org/x/net@v0.54.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.25.11, 1.26.4 | CVE-2026-27145 | HIGH | not affected | vulnerable code cannot be controlled by adversary | gobinary |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.25.11, 1.26.4 | CVE-2026-42504 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | golang.org/x/net@v0.54.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | golang.org/x/text@v0.37.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | golang.org/x/crypto@v0.52.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/csi-snapshotter:v8.6.0 | false | Harvester master | csi-snapshotter | google.golang.org/grpc@v1.81.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | CVE-2026-84445 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/livenessprobe:v2.20.0 | false | Harvester master | livenessprobe | stdlib@v1.26.6 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | usr/local/bin/longhornctl-local | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | libopenssl-3-fips-provider | libopenssl-3-fips-provider@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | libopenssl3 | libopenssl3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | openssl-3 | openssl-3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | libsasl2-3 | libsasl2-3@2.1.28-150600.7.14.1 | 2.1.28-150600.7.17.1 | SUSE-SU-2026:4836-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | curl | curl@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-cli:v1.13.0 | false | Harvester master | libcurl4 | libcurl4@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | libopenssl-3-fips-provider | libopenssl-3-fips-provider@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | libopenssl3 | libopenssl3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | openssl-3 | openssl-3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | rpcbind | rpcbind@0.2.3-150000.5.12.1 | 0.2.3-150000.5.17.1 | SUSE-SU-2026:4568-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | libexpat1 | libexpat1@2.7.1-150700.3.12.1 | 2.8.5-150700.3.15.1 | SUSE-SU-2026:4619-1 | CRITICAL | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | libpython3_6m1_0 | libpython3_6m1_0@3.6.15-150300.10.118.1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | python3-base | python3-base@3.6.15-150300.10.118.1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | libsasl2-3 | libsasl2-3@2.1.28-150600.7.14.1 | 2.1.28-150600.7.17.1 | SUSE-SU-2026:4836-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | curl | curl@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-engine:v1.13.0 | false | Harvester master | libcurl4 | libcurl4@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/go-spdk-helper | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/go-spdk-helper | golang.org/x/text@v0.40.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/go-spdk-helper | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/grpc_health_probe | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/longhorn-instance-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | usr/local/bin/go-spdk-helper | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libopenssl-3-devel | libopenssl-3-devel@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | rpcbind | rpcbind@0.2.3-150000.5.12.1 | 0.2.3-150000.5.17.1 | SUSE-SU-2026:4568-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libexpat1 | libexpat1@2.7.1-150700.3.12.1 | 2.8.5-150700.3.15.1 | SUSE-SU-2026:4619-1 | CRITICAL | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | glibc-devel | glibc-devel@2.38-150600.14.58.1 | 2.38-150600.14.61.1 | SUSE-SU-2026:4656-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libpython3_6m1_0 | libpython3_6m1_0@3.6.15-150300.10.118.1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | python3-base | python3-base@3.6.15-150300.10.118.1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libsasl2-3 | libsasl2-3@2.1.28-150600.7.14.1 | 2.1.28-150600.7.17.1 | SUSE-SU-2026:4836-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | cpp7 | cpp7@7.5.0+r278197-150000.4.44.1 | 7.5.0+r278197-150000.4.49.1 | SUSE-SU-2026:4913-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | gcc7 | gcc7@7.5.0+r278197-150000.4.44.1 | 7.5.0+r278197-150000.4.49.1 | SUSE-SU-2026:4913-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | gcc7-c++ | gcc7-c++@7.5.0+r278197-150000.4.44.1 | 7.5.0+r278197-150000.4.49.1 | SUSE-SU-2026:4913-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libasan4 | libasan4@7.5.0+r278197-150000.4.44.1 | 7.5.0+r278197-150000.4.49.1 | SUSE-SU-2026:4913-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libcilkrts5 | libcilkrts5@7.5.0+r278197-150000.4.44.1 | 7.5.0+r278197-150000.4.49.1 | SUSE-SU-2026:4913-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libstdc++6-devel-gcc7 | libstdc++6-devel-gcc7@7.5.0+r278197-150000.4.44.1 | 7.5.0+r278197-150000.4.49.1 | SUSE-SU-2026:4913-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libubsan0 | libubsan0@7.5.0+r278197-150000.4.44.1 | 7.5.0+r278197-150000.4.49.1 | SUSE-SU-2026:4913-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | curl | curl@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-instance-manager:v1.13.0 | false | Harvester master | libcurl4 | libcurl4@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | usr/local/sbin/longhorn-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | libopenssl-3-fips-provider | libopenssl-3-fips-provider@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | libopenssl3 | libopenssl3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | openssl-3 | openssl-3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | rpcbind | rpcbind@0.2.3-150000.5.12.1 | 0.2.3-150000.5.17.1 | SUSE-SU-2026:4568-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | libexpat1 | libexpat1@2.7.1-150700.3.12.1 | 2.8.5-150700.3.15.1 | SUSE-SU-2026:4619-1 | CRITICAL | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | libpython3_6m1_0 | libpython3_6m1_0@3.6.15-150300.10.118.1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | python3-base | python3-base@3.6.15-150300.10.118.1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | libsasl2-3 | libsasl2-3@2.1.28-150600.7.14.1 | 2.1.28-150600.7.17.1 | SUSE-SU-2026:4836-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | curl | curl@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-manager:v1.13.0 | false | Harvester master | libcurl4 | libcurl4@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | longhorn-share-manager | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | libX11-6 | libX11-6@1.8.10-150700.4.3.1 | 1.8.10-150700.4.8.1 | SUSE-SU-2026:4502-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | libX11-data | libX11-data@1.8.10-150700.4.3.1 | 1.8.10-150700.4.8.1 | SUSE-SU-2026:4502-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | rpcbind | rpcbind@0.2.3-150000.5.12.1 | 0.2.3-150000.5.17.1 | SUSE-SU-2026:4568-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | libexpat1 | libexpat1@2.7.1-150700.3.12.1 | 2.8.5-150700.3.15.1 | SUSE-SU-2026:4619-1 | CRITICAL | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | libsasl2-3 | libsasl2-3@2.1.28-150600.7.14.1 | 2.1.28-150600.7.17.1 | SUSE-SU-2026:4836-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-share-manager:v1.13.0 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | libX11-6 | libX11-6@1.8.10-150700.4.3.1 | 1.8.10-150700.4.8.1 | SUSE-SU-2026:4502-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | libX11-data | libX11-data@1.8.10-150700.4.3.1 | 1.8.10-150700.4.8.1 | SUSE-SU-2026:4502-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | libexpat1 | libexpat1@2.7.1-150700.3.12.1 | 2.8.5-150700.3.15.1 | SUSE-SU-2026:4619-1 | CRITICAL | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | libsasl2-3 | libsasl2-3@2.1.28-150600.7.14.1 | 2.1.28-150600.7.17.1 | SUSE-SU-2026:4836-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | curl | curl@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/longhorn-ui:v1.13.0 | false | Harvester master | libcurl4 | libcurl4@8.14.1-150700.7.26.1 | 8.22.0-150700.7.33.1 | SUSE-SU-2026:5068-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/yq | stdlib@v1.27.0 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/yq | stdlib@v1.27.0 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | usr/bin/yq | stdlib@v1.27.0 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | libopenssl-3-fips-provider | libopenssl-3-fips-provider@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | libopenssl3 | libopenssl3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | openssl-3 | openssl-3@3.5.0-150700.5.50.1 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | libsasl2-3 | libsasl2-3@2.1.28-150600.7.14.1 | 2.1.28-150600.7.17.1 | SUSE-SU-2026:4836-1 | HIGH | not affected | vulnerable code not present | sles |
| longhornio/support-bundle-kit:v0.0.98 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.10, 1.26.3 | CVE-2026-33814 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.10, 1.26.3 | CVE-2026-39820 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/crypto@v0.51.0 | 0.52.0 | CVE-2026-39828 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/crypto@v0.51.0 | 0.52.0 | CVE-2026-39829 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/crypto@v0.51.0 | 0.52.0 | CVE-2026-39830 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/crypto@v0.51.0 | 0.52.0 | CVE-2026-39831 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/crypto@v0.51.0 | 0.52.0 | CVE-2026-39832 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/crypto@v0.51.0 | 0.52.0 | CVE-2026-39835 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.10, 1.26.3 | CVE-2026-42499 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.25.11, 1.26.4 | CVE-2026-42504 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/crypto@v0.51.0 | 0.52.0 | CVE-2026-42508 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/crypto@v0.51.0 | 0.52.0 | CVE-2026-46595 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/crypto@v0.51.0 | 0.52.0 | CVE-2026-46597 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/net@v0.55.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/text@v0.37.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | golang.org/x/crypto@v0.51.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | stdlib@v1.25.9 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/cluster-api-controller:v1.13.3 | false | Harvester master | manager | google.golang.org/grpc@v1.80.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | CVE-2026-84445 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/hardened-calico:v3.32.2-build20261022 | false | Harvester master | opt/cni/bin/calico | github.com/klauspost/compress@v1.18.0 | 1.18.7 | CVE-2026-63209 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/hardened-calico:v3.32.2-build20261022 | false | Harvester master | opt/cni/bin/calico-ipam | github.com/klauspost/compress@v1.18.0 | 1.18.7 | CVE-2026-63209 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/hardened-cluster-autoscaler:v1.11.0-build20261020 | false | Harvester master | cluster-proportional-autoscaler | golang.org/x/text@v0.39.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/hardened-etcd:v3.6.14-k3s3-build20261020 | false | Harvester master | usr/local/bin/etcd | golang.org/x/text@v0.39.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/hardened-etcd:v3.6.14-k3s3-build20261020 | false | Harvester master | usr/local/bin/etcdctl | golang.org/x/text@v0.39.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-kubeovn-operator:v1.16.4-dev.1 | false | Harvester master | manager | google.golang.org/grpc@v1.82.1 | 1.83.1 | CVE-2026-84304 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-kubeovn-operator:v1.16.4-dev.1 | false | Harvester master | manager | google.golang.org/grpc@v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | CVE-2026-84445 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-load-balancer-webhook:master-head | false | Harvester master | usr/bin/harvester-load-balancer-webhook | github.com/rancher/rancher@v0.0.0-20250827213702-1daa918b630b | 2.2.4, 1.6.27 | CVE-2019-12274 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-load-balancer-webhook:master-head | false | Harvester master | usr/bin/harvester-load-balancer-webhook | github.com/rancher/rancher@v0.0.0-20250827213702-1daa918b630b | 2.4.18, 2.5.12, 2.6.3 | CVE-2021-36775 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-load-balancer-webhook:master-head | false | Harvester master | usr/bin/harvester-load-balancer-webhook | github.com/rancher/rancher@v0.0.0-20250827213702-1daa918b630b | 0.0.0-20260129092249-bb0625fd1896, 2.13.2, 2.12.6, 2.11.10, 2.10.11 | CVE-2025-67601 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-load-balancer-webhook:master-head | false | Harvester master | usr/bin/harvester-load-balancer-webhook | github.com/rancher/rancher@v0.0.0-20250827213702-1daa918b630b | 2.14.2, 2.13.6, 2.12.10, 0.0.0-20260513182521-2800aaac25b5 | CVE-2026-41052 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-load-balancer-webhook:master-head | false | Harvester master | usr/bin/harvester-load-balancer-webhook | github.com/rancher/rancher@v0.0.0-20250827213702-1daa918b630b | 2.14.2, 2.13.6, 0.0.0-20260519172014-d0c047bbc6d2 | CVE-2026-41053 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-load-balancer-webhook:master-head | false | Harvester master | usr/bin/harvester-load-balancer-webhook | github.com/rancher/rancher@v0.0.0-20250827213702-1daa918b630b | 2.14.2, 2.13.6, 2.12.10, 2.11.14, 2.10.12, 0.0.0-20260617231817-2aa77eb283e7 | CVE-2026-44939 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-node-disk-manager-webhook:master-head | false | Harvester master | usr/bin/node-disk-manager-webhook | github.com/harvester/harvester@v1.5.1 | 1.8.0 | CVE-2025-71261 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-node-disk-manager:master-head | false | Harvester master | usr/bin/node-disk-manager | github.com/harvester/harvester@v1.5.1 | 1.8.0 | CVE-2025-71261 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-pcidevices:master-head | false | Harvester master | usr/bin/pcidevices | golang.org/x/text@v0.39.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-pcidevices:master-head | false | Harvester master | usr/bin/pcidevices | kubevirt.io/kubevirt@v1.7.0 | 1.8.3, 1.7.4, 1.6.6 | CVE-2026-7374 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-pcidevices:master-head | false | Harvester master | usr/bin/pcidevices | kubevirt.io/kubevirt@v1.7.0 | CVE-2026-9804 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/net@v0.20.0 | 0.23.0 | CVE-2023-45288 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/containerd/containerd@v1.7.12 | 1.7.29 | CVE-2024-25621 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/moby/moby@v25.0.1+incompatible | 26.0.0 | CVE-2024-36621 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/moby/moby@v25.0.1+incompatible | 25.0.4 | CVE-2024-36623 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/docker/docker@v23.0.8+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | CVE-2024-41110 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.31.0 | CVE-2024-45337 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/net@v0.20.0 | 0.33.0 | CVE-2024-45338 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/docker/cli@v23.0.4+incompatible | 29.2.0 | CVE-2025-15558 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/harvester-installer | github.com/docker/cli@v27.1.1+incompatible | 29.2.0 | CVE-2025-15558 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | github.com/docker/cli@v29.0.4+incompatible | 29.2.0 | CVE-2025-15558 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/go-git/go-git/v5@v5.11.0 | 5.13.0 | CVE-2025-21613 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/go-git/go-git/v5@v5.11.0 | 5.13.0 | CVE-2025-21614 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.35.0 | CVE-2025-22869 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.43.0 | CVE-2025-47913 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.43.0 | CVE-2025-47913 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.8, 1.26.1 | CVE-2026-25679 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/net@v0.20.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/net@v0.44.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/net@v0.20.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/net@v0.44.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.11, 1.26.4 | CVE-2026-27145 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.9, 1.26.2 | CVE-2026-32280 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.9, 1.26.2 | CVE-2026-32281 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.9, 1.26.2 | CVE-2026-32283 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | google.golang.org/grpc@v1.72.1 | 1.79.3 | CVE-2026-33186 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.10, 1.26.3 | CVE-2026-33811 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/net@v0.20.0 | 0.53.0 | CVE-2026-33814 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/net@v0.44.0 | 0.53.0 | CVE-2026-33814 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.10, 1.26.3 | CVE-2026-33814 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-33818 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/moby/moby@v25.0.1+incompatible | 29.3.1 | CVE-2026-34040 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/distribution/distribution@v2.8.1+incompatible | CVE-2026-35172 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.10, 1.26.3 | CVE-2026-39820 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/net@v0.20.0 | 0.55.0 | CVE-2026-39821 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/net@v0.44.0 | 0.55.0 | CVE-2026-39821 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-39821 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.52.0 | CVE-2026-39828 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.52.0 | CVE-2026-39828 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.52.0 | CVE-2026-39829 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.52.0 | CVE-2026-39829 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.52.0 | CVE-2026-39830 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.52.0 | CVE-2026-39830 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.52.0 | CVE-2026-39831 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.52.0 | CVE-2026-39831 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.52.0 | CVE-2026-39832 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.52.0 | CVE-2026-39832 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.52.0 | CVE-2026-39835 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.52.0 | CVE-2026-39835 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.10, 1.26.3 | CVE-2026-39836 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | go.opentelemetry.io/otel/sdk@v1.34.0 | 1.43.0 | CVE-2026-39883 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/docker/docker@v23.0.8+incompatible | CVE-2026-41567 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/moby/moby@v25.0.1+incompatible | CVE-2026-41567 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/docker/docker@v23.0.8+incompatible | CVE-2026-42306 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/moby/moby@v25.0.1+incompatible | CVE-2026-42306 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.10, 1.26.3 | CVE-2026-42499 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.11, 1.26.4 | CVE-2026-42504 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.52.0 | CVE-2026-42508 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.52.0 | CVE-2026-42508 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/go-git/go-billy/v5@v5.5.0 | 5.9.0 | CVE-2026-44973 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/go-git/go-git/v5@v5.11.0 | 5.19.0 | CVE-2026-45022 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.52.0 | CVE-2026-46595 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.52.0 | CVE-2026-46595 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.52.0 | CVE-2026-46597 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.52.0 | CVE-2026-46597 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/net@v0.20.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/net@v0.44.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/containerd/containerd@v1.7.12 | 1.7.33 | CVE-2026-53488 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/upgrade-helper | github.com/kube-logging/logging-operator@v0.0.0-20250424202944-7e1f9aad6e21 | 0.0.0-20260608145523-cf437d7f1e05 | CVE-2026-54680 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/text@v0.29.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/text@v0.14.0 | 0.39.0 | CVE-2026-56852 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/text@v0.29.0 | 0.39.0 | CVE-2026-56852 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | golang.org/x/crypto@v0.18.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | golang.org/x/crypto@v0.42.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56858 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56860 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56862 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/local/bin/elemental | github.com/go-git/go-git/v5@v5.11.0 | 5.19.2 | CVE-2026-71556 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | stdlib@v1.24.13 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | google.golang.org/grpc@v1.72.1 | 1.83.1 | CVE-2026-84304 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | google.golang.org/grpc@v1.72.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | CVE-2026-84445 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-upgrade:master-head | false | Harvester master | usr/bin/wharfie | google.golang.org/grpc@v1.72.1 | 1.82.1 | GHSA-hrxh-6v49-42gf | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-vm-import-controller:main-head | false | Harvester master | usr/bin/vm-import-controller | kubevirt.io/kubevirt@v1.7.0 | 1.8.3, 1.7.4, 1.6.6 | CVE-2026-7374 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-vm-import-controller:main-head | false | Harvester master | usr/bin/vm-import-controller | kubevirt.io/kubevirt@v1.7.0 | CVE-2026-9804 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 2.2.4, 1.6.27 | CVE-2019-12274 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 2.4.18, 2.5.12, 2.6.3 | CVE-2021-36775 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/docker/cli@v27.1.1+incompatible | 29.2.0 | CVE-2025-15558 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 0.0.0-20260129092249-bb0625fd1896, 2.13.2, 2.12.6, 2.11.10, 2.10.11 | CVE-2025-67601 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/go-jose/go-jose/v3@v3.0.5 | CVE-2026-116587 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 2.14.2, 2.13.6, 2.12.10, 0.0.0-20260513182521-2800aaac25b5 | CVE-2026-41052 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 2.14.2, 2.13.6, 0.0.0-20260519172014-d0c047bbc6d2 | CVE-2026-41053 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/docker/docker@v25.0.6+incompatible | CVE-2026-41567 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/docker/docker@v25.0.6+incompatible | CVE-2026-42306 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 2.14.2, 2.13.6, 2.12.10, 2.11.14, 2.10.12, 0.0.0-20260617231817-2aa77eb283e7 | CVE-2026-44939 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester-webhook:master-head | false | Harvester master | usr/bin/harvester-webhook | github.com/kube-logging/logging-operator@v0.0.0-20250424202944-7e1f9aad6e21 | 0.0.0-20260608145523-cf437d7f1e05 | CVE-2026-54680 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 2.2.4, 1.6.27 | CVE-2019-12274 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 2.4.18, 2.5.12, 2.6.3 | CVE-2021-36775 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/docker/cli@v27.1.1+incompatible | 29.2.0 | CVE-2025-15558 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 0.0.0-20260129092249-bb0625fd1896, 2.13.2, 2.12.6, 2.11.10, 2.10.11 | CVE-2025-67601 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/go-jose/go-jose/v3@v3.0.5 | CVE-2026-116587 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 2.14.2, 2.13.6, 2.12.10, 0.0.0-20260513182521-2800aaac25b5 | CVE-2026-41052 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 2.14.2, 2.13.6, 0.0.0-20260519172014-d0c047bbc6d2 | CVE-2026-41053 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/docker/docker@v25.0.6+incompatible | CVE-2026-41567 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/docker/docker@v25.0.6+incompatible | CVE-2026-42306 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/rancher/rancher@v0.0.0-20250828140533-07a90f09a491 | 2.14.2, 2.13.6, 2.12.10, 2.11.14, 2.10.12, 0.0.0-20260617231817-2aa77eb283e7 | CVE-2026-44939 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/harvester:master-head | false | Harvester master | usr/bin/harvester | github.com/kube-logging/logging-operator@v0.0.0-20250424202944-7e1f9aad6e21 | 0.0.0-20260608145523-cf437d7f1e05 | CVE-2026-54680 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.34.11 | golang.org/x/text@v0.39.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.35.8 | golang.org/x/text@v0.39.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kubectl1.36.4 | golang.org/x/text@v0.39.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | usr/bin/kuberlr | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/kuberlr-kubectl:v8.1.2 | false | Harvester master | busybox | busybox@1.37.0-160000.6.1 | 1.37.0-160000.8.1 | SUSE-SU-2026:24215-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | zlib1g | zlib1g@1:1.2.13.dfsg-1 | CVE-2023-45853 | CRITICAL | not affected | vulnerable code not present | debian | |
| rancher/mirrored-fluent-fluent-bit:3.1.8 | true | Harvester master | libcap2 | libcap2@1:2.66-4 | 1:2.66-4+deb12u3 | CVE-2026-4878 | HIGH | not affected | vulnerable code not in execute path | debian |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | net-imap@0.3.4.1 | ~> 0.4.24, ~> 0.5.14, >= 0.6.4 | CVE-2026-42257 | CRITICAL | not affected | vulnerable code not in execute path | gemspec |
| rancher/mirrored-kube-logging-fluentd:v1.16-4.10-full | true | Harvester master | Ruby | net-imap@0.4.2 | ~> 0.4.24, ~> 0.5.14, >= 0.6.4 | CVE-2026-42257 | CRITICAL | not affected | vulnerable code not in execute path | gemspec |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/net@v0.29.0 | 0.33.0 | CVE-2024-45338 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/oauth2@v0.21.0 | 0.27.0 | CVE-2025-22868 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/net@v0.29.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/net@v0.29.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.10, 1.26.3 | CVE-2026-33811 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.10, 1.26.3 | CVE-2026-39820 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.25.10, 1.26.3 | CVE-2026-42499 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/net@v0.29.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/text@v0.18.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | golang.org/x/text@v0.18.0 | 0.39.0 | CVE-2026-56852 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/mirrored-kube-logging-logging-operator:4.10.0 | true | Harvester master | manager | stdlib@v1.23.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.4 | true | Harvester master | kube-vip | stdlib@v1.27.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher-agent:v2.15.3 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| rancher/rancher-webhook:v0.11.4 | false | Harvester master | libpcre2-8-0 | libpcre2-8-0@10.45-160000.3.1 | 10.45-160000.4.1 | SUSE-SU-2026:23906-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| rancher/rancher-webhook:v0.11.4 | false | Harvester master | glibc | glibc@2.40-160000.6.1 | 2.40-160000.7.1 | SUSE-SU-2026:23934-1 | HIGH | not affected | vulnerable code not in execute path | sles |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-harvester | github.com/opencontainers/runc@v1.1.14 | 1.2.8, 1.3.3, 1.4.0-rc.3 | CVE-2025-31133 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-harvester | github.com/opencontainers/runc@v1.1.14 | 1.2.8, 1.3.3, 1.4.0-rc.3 | CVE-2025-52565 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-harvester | github.com/opencontainers/runc@v1.1.14 | 1.2.8, 1.3.3, 1.4.0-rc.3 | CVE-2025-52881 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-harvester | github.com/harvester/harvester@v0.0.0-20260909043031-0dbb2db47d2d | 1.8.0 | CVE-2025-71261 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | stdlib@v1.26.8 | 1.26.10, 1.27.3 | CVE-2026-111943 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | golang.org/x/net@v0.43.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/net@v0.51.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | golang.org/x/net@v0.52.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | golang.org/x/net@v0.43.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/net@v0.51.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | golang.org/x/net@v0.52.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.11, 1.26.4 | CVE-2026-27145 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.9, 1.26.2 | CVE-2026-32280 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.9, 1.26.2 | CVE-2026-32281 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.9, 1.26.2 | CVE-2026-32283 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.26.2 | CVE-2026-33810 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.10, 1.26.3 | CVE-2026-33811 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | golang.org/x/net@v0.43.0 | 0.53.0 | CVE-2026-33814 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | golang.org/x/net@v0.52.0 | 0.53.0 | CVE-2026-33814 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.10, 1.26.3 | CVE-2026-33814 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.10, 1.26.3 | CVE-2026-39820 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | golang.org/x/net@v0.43.0 | 0.55.0 | CVE-2026-39821 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/net@v0.51.0 | 0.55.0 | CVE-2026-39821 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | golang.org/x/net@v0.52.0 | 0.55.0 | CVE-2026-39821 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39828 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39828 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/crypto@v0.48.0 | 0.52.0 | CVE-2026-39828 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39829 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39829 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/crypto@v0.48.0 | 0.52.0 | CVE-2026-39829 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39830 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39830 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/crypto@v0.48.0 | 0.52.0 | CVE-2026-39830 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39831 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39831 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/crypto@v0.48.0 | 0.52.0 | CVE-2026-39831 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39832 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39832 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/crypto@v0.48.0 | 0.52.0 | CVE-2026-39832 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39835 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-39835 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/crypto@v0.48.0 | 0.52.0 | CVE-2026-39835 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.10, 1.26.3 | CVE-2026-39836 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | github.com/docker/docker@v25.0.15-0.20260325154711-d2dbc0547253+incompatible | CVE-2026-41567 | HIGH | not affected | vulnerable code not present | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | github.com/docker/docker@v25.0.15-0.20260325154711-d2dbc0547253+incompatible | CVE-2026-41567 | HIGH | not affected | vulnerable code not present | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | github.com/docker/docker@v25.0.15-0.20260325154711-d2dbc0547253+incompatible | CVE-2026-42306 | HIGH | not affected | vulnerable code not present | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | github.com/docker/docker@v25.0.15-0.20260325154711-d2dbc0547253+incompatible | CVE-2026-42306 | HIGH | not affected | vulnerable code not present | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.10, 1.26.3 | CVE-2026-42499 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.25.11, 1.26.4 | CVE-2026-42504 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.25.11, 1.26.4 | CVE-2026-42504 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-42508 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-42508 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/crypto@v0.48.0 | 0.52.0 | CVE-2026-42508 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-46595 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-46595 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/crypto@v0.48.0 | 0.52.0 | CVE-2026-46595 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-46597 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/crypto@v0.47.0 | 0.52.0 | CVE-2026-46597 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/crypto@v0.48.0 | 0.52.0 | CVE-2026-46597 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | golang.org/x/net@v0.43.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/net@v0.51.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | golang.org/x/net@v0.52.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/net@v0.55.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | golang.org/x/net@v0.55.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/net@v0.55.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.26.6, 1.27.0-rc.3 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-harvester | github.com/kube-logging/logging-operator@v0.0.0-20250424202944-7e1f9aad6e21 | 0.0.0-20260608145523-cf437d7f1e05 | CVE-2026-54680 | CRITICAL | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/text@v0.34.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | golang.org/x/text@v0.36.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | golang.org/x/text@v0.38.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/text@v0.34.0 | 0.39.0 | CVE-2026-56852 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | golang.org/x/text@v0.36.0 | 0.39.0 | CVE-2026-56852 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | golang.org/x/text@v0.38.0 | 0.39.0 | CVE-2026-56852 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56853 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/crypto@v0.47.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/crypto@v0.47.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | golang.org/x/crypto@v0.48.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56858 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/mod@v0.38.0 | 0.40.0 | CVE-2026-56864 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/mod@v0.38.0 | 0.40.0 | CVE-2026-56864 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd | golang.org/x/mod@v0.38.0 | 0.40.0 | CVE-2026-56865 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/k3s | golang.org/x/mod@v0.38.0 | 0.40.0 | CVE-2026-56865 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | stdlib@v1.25.10 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-linode | stdlib@v1.26.1 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/containerd-shim-runc-v2 | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-78669 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/etcdctl | google.golang.org/grpc@v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | CVE-2026-84445 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | usr/bin/runc | stdlib@v1.26.8 | 1.26.9, 1.27.2 | CVE-2026-97031 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/rancher:v2.15.3 | false | Harvester master | opt/drivers/management-state/bin/docker-machine-driver-harvester | kubevirt.io/kubevirt@v1.8.3 | CVE-2026-9804 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/rancher:v2.15.3 | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| rancher/rke2-runtime:v1.36.6-rke2r1 | false | Harvester master | bin/crictl | github.com/docker/docker@v27.1.1+incompatible | CVE-2026-41567 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/rke2-runtime:v1.36.6-rke2r1 | false | Harvester master | bin/containerd | github.com/docker/docker@v27.3.1+incompatible | CVE-2026-41567 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/rke2-runtime:v1.36.6-rke2r1 | false | Harvester master | bin/crictl | github.com/docker/docker@v27.1.1+incompatible | CVE-2026-42306 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/rke2-runtime:v1.36.6-rke2r1 | false | Harvester master | bin/containerd | github.com/docker/docker@v27.3.1+incompatible | CVE-2026-42306 | HIGH | not affected | vulnerable code not in execute path | gobinary | |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/net@v0.53.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/net@v0.53.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.52.0 | CVE-2026-39828 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.52.0 | CVE-2026-46595 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/net@v0.53.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | oras.land/oras-go/v2@v2.6.0 | 2.6.1 | CVE-2026-50151 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | oras.land/oras-go/v2@v2.6.0 | 2.6.2 | CVE-2026-50163 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/helm | oras.land/oras-go/v2@v2.6.1 | 2.6.2 | CVE-2026-50163 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/text@v0.36.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/kubectl | golang.org/x/text@v0.39.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/helm | golang.org/x/text@v0.40.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/crypto@v0.50.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/helm | golang.org/x/crypto@v0.54.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/mod@v0.35.0 | 0.40.0 | CVE-2026-56864 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/shell:v0.8.3 | false | Harvester master | usr/local/bin/k9s | golang.org/x/mod@v0.35.0 | 0.40.0 | CVE-2026-56865 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/support-bundle-kit:master-head | false | Harvester master | libbrotlicommon1 | libbrotlicommon1@1.0.7-150200.3.5.1 | 1.0.7-150200.3.8.1 | SUSE-SU-2026:4945-1 | HIGH | not affected | vulnerable code not present | sles |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | golang.org/x/net@v0.53.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | golang.org/x/net@v0.53.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | golang.org/x/net@v0.53.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.26.6, 1.27.0-rc.3 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | golang.org/x/text@v0.36.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 | CVE-2026-56859 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| rancher/system-upgrade-controller:v0.20.1 | false | Harvester master | bin/system-upgrade-controller | stdlib@v1.26.5 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.8, 1.26.1 | CVE-2026-25679 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.26.1 | CVE-2026-27137 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.11, 1.26.4 | CVE-2026-27145 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.9, 1.26.2 | CVE-2026-32280 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.9, 1.26.2 | CVE-2026-32281 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.9, 1.26.2 | CVE-2026-32283 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.26.2 | CVE-2026-33810 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.10, 1.26.3 | CVE-2026-33811 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.10, 1.26.3 | CVE-2026-33814 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.10, 1.26.3 | CVE-2026-39820 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.10, 1.26.3 | CVE-2026-39836 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.10, 1.26.3 | CVE-2026-42499 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.25.11, 1.26.4 | CVE-2026-42504 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/descheduler/descheduler:v0.37.0 | false | Harvester master | bin/descheduler | stdlib@v1.26.0 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | golang.org/x/net@v0.54.0 | 0.55.0 | CVE-2026-25681 | HIGH | not affected | vulnerable code not present | gobinary |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | golang.org/x/net@v0.54.0 | 0.55.0 | CVE-2026-27136 | HIGH | not affected | vulnerable code not present | gobinary |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.25.11, 1.26.4 | CVE-2026-27145 | HIGH | not affected | vulnerable code cannot be controlled by adversary | gobinary |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | CVE-2026-39822 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.25.11, 1.26.4 | CVE-2026-42504 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | golang.org/x/net@v0.54.0 | 0.56.0 | CVE-2026-46600 | HIGH | not affected | vulnerable code not present | gobinary |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | golang.org/x/text@v0.37.0 | 0.41.0 | CVE-2026-56851 | HIGH | not affected | vulnerable code not present | gobinary |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | golang.org/x/crypto@v0.52.0 | 0.55.0 | CVE-2026-56854 | HIGH | not affected | vulnerable code not present | gobinary |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | stdlib@v1.26.3 | 1.26.9, 1.27.2 | CVE-2026-78667 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.k8s.io/sig-storage/snapshot-controller:v8.6.0 | false | Harvester master | snapshot-controller | google.golang.org/grpc@v1.81.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | CVE-2026-84445 | HIGH | not affected | vulnerable code not in execute path | gobinary |
| registry.suse.com/suse/sles/16.0/virt-handler:1.9.0-2.14 | false | Harvester master | libexpat1 | libexpat1@2.8.4-160000.1.1 | 2.8.5-160000.1.1 | SUSE-SU-2026:24469-1 | HIGH | not affected | vulnerable code not in execute path | sles |