SUSE Rancher - RKE2 v1.33.2 version - CVE Scans - 2025-07-02

How to use this page

Search:

Image Mirrored Release Binary/Package Dependency Vulnerability ID (CVE) Severity Status Justification (for status not affected) Type (language or OS)
rancher/mirrored-ingress-nginx-kube-webhook-certgen:v1.5.3 true RKE2 v1.33.2 kube-webhook-certgen stdlib@v1.24.2 CVE-2025-22874 HIGH affected gobinary
rancher/hardened-addon-resizer:1.8.23-build20250612 false RKE2 v1.33.2 pod_nanny golang.org/x/net@v0.33.0 CVE-2025-22870 none not affected vulnerable code not present gobinary
rancher/hardened-addon-resizer:1.8.23-build20250612 false RKE2 v1.33.2 pod_nanny golang.org/x/net@v0.33.0 CVE-2025-22872 none not affected vulnerable code not present gobinary
rancher/hardened-calico:v3.30.1-build20250611 false RKE2 v1.33.2 pam pam@1.3.0-150000.6.76.1 SUSE-SU-2025:02013-1 none not affected vulnerable code cannot be controlled by adversary sles
rancher/hardened-cluster-autoscaler:v1.10.2-build20250611 false RKE2 v1.33.2 cluster-proportional-autoscaler golang.org/x/net@v0.36.0 CVE-2025-22872 none not affected vulnerable code not present gobinary
rancher/hardened-flannel:v0.27.0-build20250611 false RKE2 v1.33.2 pam pam@1.3.0-150000.6.76.1 SUSE-SU-2025:02013-1 none not affected vulnerable code cannot be controlled by adversary sles
rancher/hardened-flannel:v0.27.0-build20250611 false RKE2 v1.33.2 pam-config pam-config@1.1-150600.16.3.1 SUSE-SU-2025:02080-1 none not affected vulnerable code cannot be controlled by adversary sles
rancher/hardened-k8s-metrics-server:v0.7.2-build20250612 false RKE2 v1.33.2 metrics-server golang.org/x/crypto@v0.26.0 CVE-2024-45337 none not affected vulnerable code not present gobinary
rancher/hardened-k8s-metrics-server:v0.7.2-build20250612 false RKE2 v1.33.2 metrics-server golang.org/x/crypto@v0.26.0 CVE-2025-22869 none not affected vulnerable code not present gobinary
rancher/hardened-k8s-metrics-server:v0.7.2-build20250612 false RKE2 v1.33.2 metrics-server golang.org/x/net@v0.28.0 CVE-2025-22870 none not affected vulnerable code not present gobinary
rancher/hardened-k8s-metrics-server:v0.7.2-build20250612 false RKE2 v1.33.2 metrics-server golang.org/x/net@v0.28.0 CVE-2025-22872 none not affected vulnerable code not present gobinary
rancher/hardened-kubernetes:v1.33.2-rke2r1-build20250618 false RKE2 v1.33.2 pam pam@1.3.0-150000.6.76.1 SUSE-SU-2025:02013-1 none not affected vulnerable code cannot be controlled by adversary sles
rancher/hardened-kubernetes:v1.33.2-rke2r1-build20250618 false RKE2 v1.33.2 usr/local/bin/kubelet go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.42.0 CVE-2023-45142 none not affected vulnerable code not present gobinary
rancher/mirrored-sig-storage-snapshot-controller:v8.2.0 true RKE2 v1.33.2 snapshot-controller golang.org/x/net@v0.31.0 CVE-2025-22870 none not affected vulnerable code not present gobinary
rancher/mirrored-sig-storage-snapshot-controller:v8.2.0 true RKE2 v1.33.2 snapshot-controller golang.org/x/net@v0.31.0 CVE-2025-22872 none not affected vulnerable code not present gobinary
rancher/nginx-ingress-controller:v1.12.2-hardened2 false RKE2 v1.33.2 pam pam@1.3.0-150000.6.76.1 SUSE-SU-2025:02013-1 none not affected vulnerable code cannot be controlled by adversary sles
rancher/rke2-runtime:v1.33.2-rke2r1 false RKE2 v1.33.2 bin/kubelet go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.42.0 CVE-2023-45142 none not affected vulnerable code not present gobinary