SUSE Rancher - Rancher AI v1.1.0 version - CVE Scans - 2026-10-24

How to use this page

  • You can click a column header to sort by column.
  • Use the search bar below to filter the results by image (and version/tag), if the image is mirrored or made by SUSE (true/false),
    release, affected binary, vulnerable dependency (and its version), vulnerability ID (CVE, GHSA, SUSE-SU etc.), severity,
    status (if affected or not affected/false-positive), justification (for false-positives),
    vulnerability type (related to the programming language or container OS).
  • The search functionality might execute a bit slow depending on the number of vulnerabilities displayed in the page.
  • False-positive CVEs that are removed with VEX have the status as "not affected" with the severity set to "none",
    because they do not affect the binary/package/image. The justification explains why they are false-positives,
    according to the VEX statuses as explained in KB 000021573.
  • For further instructions about scanned versions, scanning frequency, tooling and false-positives, please consult the main instructions.
  • The severity (CVSS rating) of some CVEs in the portal might differ from the original severity reported by some vendors and security scanners.
    This happens, because SUSE recalculates the CVSS rating of CVEs based on criteria, like: applicability and difficulty of the issue being
    exploited in the wild; how it can actually affect the confidentiality, integrity and availability of SUSE's products etc. CVEs that had their CVSS
    severity rating changed, either decreased or increased, will have the distinctive tag '*' close to its severity.
Image Mirrored Release Binary/Package Dependency Vulnerability ID (CVE) Severity Status Justification (for status not affected) Type (language or OS)
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libopenssl-3-fips-provider libopenssl-3-fips-provider@3.2.3-150700.5.40.1 SUSE-SU-2026:3835-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libopenssl3 libopenssl3@3.2.3-150700.5.40.1 SUSE-SU-2026:3835-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 openssl openssl@3.2.3-150700.1.1 SUSE-SU-2026:3835-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 openssl-3 openssl-3@3.2.3-150700.5.40.1 SUSE-SU-2026:3835-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libopenssl-3-fips-provider libopenssl-3-fips-provider@3.2.3-150700.5.40.1 SUSE-SU-2026:4039-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libopenssl3 libopenssl3@3.2.3-150700.5.40.1 SUSE-SU-2026:4039-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 openssl-3 openssl-3@3.2.3-150700.5.40.1 SUSE-SU-2026:4039-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libacl1 libacl1@2.2.52-4.3.1 SUSE-SU-2026:4176-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libattr1 libattr1@2.4.47-2.19 SUSE-SU-2026:4176-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libpcre2-8-0 libpcre2-8-0@10.42-150600.1.26 SUSE-SU-2026:4241-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libopenssl-3-fips-provider libopenssl-3-fips-provider@3.2.3-150700.5.40.1 SUSE-SU-2026:4414-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libopenssl3 libopenssl3@3.2.3-150700.5.40.1 SUSE-SU-2026:4414-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 openssl-3 openssl-3@3.2.3-150700.5.40.1 SUSE-SU-2026:4414-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libexpat1 libexpat1@2.7.1-150700.3.12.1 SUSE-SU-2026:4619-1 CRITICAL affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 glibc glibc@2.38-150600.14.52.1 SUSE-SU-2026:4656-1 HIGH affected sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libsasl2-3 libsasl2-3@2.1.28-150600.7.14.1 SUSE-SU-2026:4836-1 HIGH affected sles
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102266 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102267 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102268 CRITICAL affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102271 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102272 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102273 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python aiohttp@3.14.3 CVE-2026-111064 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python aiohttp@3.14.3 CVE-2026-111066 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python urllib3@2.7.0 CVE-2026-97687 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python urllib3@2.7.0 CVE-2026-97689 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python aiohttp@3.14.3 GHSA-2g87-pp6c-29x5 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python certifi@2026.7.22 GHSA-6q48-6c7w-9gw2 CRITICAL affected python-pkg
registry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 GHSA-pxh4-856f-4h89 HIGH affected python-pkg
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-111943 HIGH affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/crypto@v0.54.0 CVE-2026-56855 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-56866 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp github.com/klauspost/compress@v1.18.6 CVE-2026-63209 HIGH affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp github.com/go-git/go-git/v5@v5.19.1 CVE-2026-71556 HIGH affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/net@v0.56.0 CVE-2026-78659 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-78659 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/net@v0.56.0 CVE-2026-78660 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-78660 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/crypto@v0.54.0 CVE-2026-78662 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-78667 HIGH affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/net@v0.56.0 CVE-2026-78669 HIGH affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-78669 HIGH affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-94440 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-97031 HIGH affected gobinary
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102266 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102267 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102268 CRITICAL affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102271 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102272 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 CVE-2026-102273 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python aiohttp@3.14.3 CVE-2026-111064 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python aiohttp@3.14.3 CVE-2026-111066 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python urllib3@2.7.0 CVE-2026-97687 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python urllib3@2.7.0 CVE-2026-97689 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python aiohttp@3.14.3 GHSA-2g87-pp6c-29x5 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python certifi@2026.7.22 GHSA-6q48-6c7w-9gw2 CRITICAL affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-agent:v1.1.0 false Rancher AI v1.1.0 Python PyJWT@2.13.0 GHSA-pxh4-856f-4h89 HIGH affected python-pkg
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-111943 HIGH affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/crypto@v0.54.0 CVE-2026-56855 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-56866 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp github.com/klauspost/compress@v1.18.6 CVE-2026-63209 HIGH affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp github.com/go-git/go-git/v5@v5.19.1 CVE-2026-71556 HIGH affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/net@v0.56.0 CVE-2026-78659 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-78659 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/net@v0.56.0 CVE-2026-78660 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-78660 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/crypto@v0.54.0 CVE-2026-78662 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-78667 HIGH affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/net@v0.56.0 CVE-2026-78669 HIGH affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-78669 HIGH affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-94440 HIGH*Severity modified based on SUSE's CVE database and CVSS rating affected gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp stdlib@v1.26.7 CVE-2026-97031 HIGH affected gobinary
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 jq jq@1.6-150000.3.20.1 SUSE-SU-2026:4275-1 none not affected vulnerable code not in execute path sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libjq1 libjq1@1.6-150000.3.20.1 SUSE-SU-2026:4275-1 none not affected vulnerable code not in execute path sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libX11-6 libX11-6@1.8.10-150700.4.3.1 SUSE-SU-2026:4502-1 none not affected vulnerable code not in execute path sles
ghcr.io/rancher/ui-extension-rancher-ai-ui:1.1.0 false Rancher AI v1.1.0 libX11-data libX11-data@1.8.10-150700.4.3.1 SUSE-SU-2026:4502-1 none not affected vulnerable code not in execute path sles
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/text@v0.40.0 CVE-2026-56851 none not affected vulnerable code not present gobinary
registry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/crypto@v0.54.0 CVE-2026-56854 none not affected vulnerable code not in execute path gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/text@v0.40.0 CVE-2026-56851 none not affected vulnerable code not present gobinary
stgregistry.suse.com/rancher/rancher-ai-mcp:v1.1.0 false Rancher AI v1.1.0 usr/local/bin/mcp golang.org/x/crypto@v0.54.0 CVE-2026-56854 none not affected vulnerable code not in execute path gobinary