Search:
Image | Mirrored | Release | Binary/Package | Dependency | Vulnerability ID (CVE) | Severity | Status | Justification (for status not affected) | Type (language or OS) |
---|---|---|---|---|---|---|---|---|---|
rancher/mirrored-ingress-nginx-kube-webhook-certgen:v1.5.3 | true | RKE2 v1.33.2 | kube-webhook-certgen | stdlib@v1.24.2 | CVE-2025-22874 | HIGH | affected | gobinary | |
rancher/hardened-addon-resizer:1.8.23-build20250612 | false | RKE2 v1.33.2 | pod_nanny | golang.org/x/net@v0.33.0 | CVE-2025-22870 | none | not affected | vulnerable code not present | gobinary |
rancher/hardened-addon-resizer:1.8.23-build20250612 | false | RKE2 v1.33.2 | pod_nanny | golang.org/x/net@v0.33.0 | CVE-2025-22872 | none | not affected | vulnerable code not present | gobinary |
rancher/hardened-calico:v3.30.1-build20250611 | false | RKE2 v1.33.2 | pam | pam@1.3.0-150000.6.76.1 | SUSE-SU-2025:02013-1 | none | not affected | vulnerable code cannot be controlled by adversary | sles |
rancher/hardened-cluster-autoscaler:v1.10.2-build20250611 | false | RKE2 v1.33.2 | cluster-proportional-autoscaler | golang.org/x/net@v0.36.0 | CVE-2025-22872 | none | not affected | vulnerable code not present | gobinary |
rancher/hardened-flannel:v0.27.0-build20250611 | false | RKE2 v1.33.2 | pam | pam@1.3.0-150000.6.76.1 | SUSE-SU-2025:02013-1 | none | not affected | vulnerable code cannot be controlled by adversary | sles |
rancher/hardened-flannel:v0.27.0-build20250611 | false | RKE2 v1.33.2 | pam-config | pam-config@1.1-150600.16.3.1 | SUSE-SU-2025:02080-1 | none | not affected | vulnerable code cannot be controlled by adversary | sles |
rancher/hardened-k8s-metrics-server:v0.7.2-build20250612 | false | RKE2 v1.33.2 | metrics-server | golang.org/x/crypto@v0.26.0 | CVE-2024-45337 | none | not affected | vulnerable code not present | gobinary |
rancher/hardened-k8s-metrics-server:v0.7.2-build20250612 | false | RKE2 v1.33.2 | metrics-server | golang.org/x/crypto@v0.26.0 | CVE-2025-22869 | none | not affected | vulnerable code not present | gobinary |
rancher/hardened-k8s-metrics-server:v0.7.2-build20250612 | false | RKE2 v1.33.2 | metrics-server | golang.org/x/net@v0.28.0 | CVE-2025-22870 | none | not affected | vulnerable code not present | gobinary |
rancher/hardened-k8s-metrics-server:v0.7.2-build20250612 | false | RKE2 v1.33.2 | metrics-server | golang.org/x/net@v0.28.0 | CVE-2025-22872 | none | not affected | vulnerable code not present | gobinary |
rancher/hardened-kubernetes:v1.33.2-rke2r1-build20250618 | false | RKE2 v1.33.2 | pam | pam@1.3.0-150000.6.76.1 | SUSE-SU-2025:02013-1 | none | not affected | vulnerable code cannot be controlled by adversary | sles |
rancher/hardened-kubernetes:v1.33.2-rke2r1-build20250618 | false | RKE2 v1.33.2 | usr/local/bin/kubelet | go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.42.0 | CVE-2023-45142 | none | not affected | vulnerable code not present | gobinary |
rancher/mirrored-sig-storage-snapshot-controller:v8.2.0 | true | RKE2 v1.33.2 | snapshot-controller | golang.org/x/net@v0.31.0 | CVE-2025-22870 | none | not affected | vulnerable code not present | gobinary |
rancher/mirrored-sig-storage-snapshot-controller:v8.2.0 | true | RKE2 v1.33.2 | snapshot-controller | golang.org/x/net@v0.31.0 | CVE-2025-22872 | none | not affected | vulnerable code not present | gobinary |
rancher/nginx-ingress-controller:v1.12.2-hardened2 | false | RKE2 v1.33.2 | pam | pam@1.3.0-150000.6.76.1 | SUSE-SU-2025:02013-1 | none | not affected | vulnerable code cannot be controlled by adversary | sles |
rancher/rke2-runtime:v1.33.2-rke2r1 | false | RKE2 v1.33.2 | bin/kubelet | go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.42.0 | CVE-2023-45142 | none | not affected | vulnerable code not present | gobinary |