Update CVE scans reports - 2026-02-02

Author: rancher-security-team[bot]

docs/csv/report-harvester-master-cves.csv

@@ -244,8 +244,8 @@ rancher/hardened-addon-resizer:1.8.23-build20251016,harvester/master,stdlib,v1.2
 rancher/hardened-addon-resizer:1.8.23-build20251016,harvester/master,golang.org/x/net,v0.33.0,gobinary,CVE-2025-22870,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-22870,pod_nanny,0.36.0,false,not_affected,vulnerable_code_not_present
 rancher/hardened-addon-resizer:1.8.23-build20251016,harvester/master,golang.org/x/net,v0.33.0,gobinary,CVE-2025-22872,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-22872,pod_nanny,0.38.0,false,not_affected,vulnerable_code_not_present
 rancher/hardened-addon-resizer:1.8.23-build20251016,harvester/master,golang.org/x/oauth2,v0.24.0,gobinary,CVE-2025-22868,HIGH,https://avd.aquasec.com/nvd/cve-2025-22868,pod_nanny,0.27.0,false,not_affected,vulnerable_code_not_present
-rancher/hardened-calico:v3.30.3-build20251015,harvester/master,libopenssl-3-fips-provider,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/hardened-calico:v3.30.3-build20251015 (sles 15.7),3.2.3-150700.5.24.1,false,affected,
-rancher/hardened-calico:v3.30.3-build20251015,harvester/master,libopenssl3,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/hardened-calico:v3.30.3-build20251015 (sles 15.7),3.2.3-150700.5.24.1,false,affected,
+rancher/hardened-calico:v3.30.3-build20251015,harvester/master,libopenssl-3-fips-provider,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/hardened-calico:v3.30.3-build20251015 (sles 15.7),3.2.3-150700.5.24.1,false,not_affected,vulnerable_code_not_in_execute_path
+rancher/hardened-calico:v3.30.3-build20251015,harvester/master,libopenssl3,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/hardened-calico:v3.30.3-build20251015 (sles 15.7),3.2.3-150700.5.24.1,false,not_affected,vulnerable_code_not_in_execute_path
 rancher/hardened-calico:v3.30.3-build20251015,harvester/master,stdlib,v1.24.9,gobinary,CVE-2025-61726,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61726,calicoctl,"1.24.12, 1.25.6",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/hardened-calico:v3.30.3-build20251015,harvester/master,stdlib,v1.24.9,gobinary,CVE-2025-61728,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61728,calicoctl,"1.24.12, 1.25.6",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/hardened-calico:v3.30.3-build20251015,harvester/master,stdlib,v1.24.9,gobinary,CVE-2025-61730,LOW,https://avd.aquasec.com/nvd/cve-2025-61730,calicoctl,"1.24.12, 1.25.6",false,affected,severity_changed_due_to_suse_cvss_score
@@ -556,9 +556,9 @@ rancher/hardened-k8s-metrics-server:v0.8.0-build20251015,harvester/master,golang
 rancher/hardened-k8s-metrics-server:v0.8.0-build20251015,harvester/master,golang.org/x/crypto,v0.38.0,gobinary,CVE-2025-58181,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58181,metrics-server,0.45.0,false,not_affected,vulnerable_code_not_present
 rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,gpg2,2.4.4-150600.3.9.1,sles,SUSE-SU-2026:0215-1,HIGH,,rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112 (sles 15.7),2.4.4-150600.3.12.1,false,affected,
 rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,libglib-2_0-0,2.78.6-150600.4.16.1,sles,SUSE-SU-2026:0018-1,HIGH,,rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112 (sles 15.7),2.78.6-150600.4.25.1,false,affected,
-rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,libopenssl-3-fips-provider,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112 (sles 15.7),3.2.3-150700.5.24.1,false,affected,
-rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,libopenssl3,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112 (sles 15.7),3.2.3-150700.5.24.1,false,affected,
-rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,openssl-3,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112 (sles 15.7),3.2.3-150700.5.24.1,false,affected,
+rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,libopenssl-3-fips-provider,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112 (sles 15.7),3.2.3-150700.5.24.1,false,not_affected,vulnerable_code_not_in_execute_path
+rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,libopenssl3,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112 (sles 15.7),3.2.3-150700.5.24.1,false,not_affected,vulnerable_code_not_in_execute_path
+rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,openssl-3,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112 (sles 15.7),3.2.3-150700.5.24.1,false,not_affected,vulnerable_code_not_in_execute_path
 rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,stdlib,v1.24.9,gobinary,CVE-2025-61726,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61726,usr/local/bin/kube-apiserver,"1.24.12, 1.25.6",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,stdlib,v1.24.9,gobinary,CVE-2025-61728,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61728,usr/local/bin/kube-apiserver,"1.24.12, 1.25.6",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,harvester/master,stdlib,v1.24.9,gobinary,CVE-2025-61729,HIGH,https://avd.aquasec.com/nvd/cve-2025-61729,usr/local/bin/kube-apiserver,"1.24.11, 1.25.5",false,affected,
@@ -815,8 +815,8 @@ rancher/harvester:master-head,harvester/master,golang.org/x/crypto,v0.40.0,gobin
 rancher/harvester:master-head,harvester/master,golang.org/x/crypto,v0.40.0,gobinary,CVE-2025-58181,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58181,usr/bin/harvester,0.45.0,false,not_affected,vulnerable_code_not_in_execute_path
 rancher/klipper-helm:v0.9.10-build20251111,harvester/master,libcrypto3,3.5.4-r0,alpine,CVE-2025-15467,CRITICAL,https://avd.aquasec.com/nvd/cve-2025-15467,rancher/klipper-helm:v0.9.10-build20251111 (alpine 3.22.2),3.5.5-r0,false,affected,
 rancher/klipper-helm:v0.9.10-build20251111,harvester/master,libcrypto3,3.5.4-r0,alpine,CVE-2025-69419,HIGH,https://avd.aquasec.com/nvd/cve-2025-69419,rancher/klipper-helm:v0.9.10-build20251111 (alpine 3.22.2),3.5.5-r0,false,affected,
-rancher/klipper-helm:v0.9.10-build20251111,harvester/master,libssl3,3.5.4-r0,alpine,CVE-2025-15467,CRITICAL,https://avd.aquasec.com/nvd/cve-2025-15467,rancher/klipper-helm:v0.9.10-build20251111 (alpine 3.22.2),3.5.5-r0,false,affected,
-rancher/klipper-helm:v0.9.10-build20251111,harvester/master,libssl3,3.5.4-r0,alpine,CVE-2025-69419,HIGH,https://avd.aquasec.com/nvd/cve-2025-69419,rancher/klipper-helm:v0.9.10-build20251111 (alpine 3.22.2),3.5.5-r0,false,affected,
+rancher/klipper-helm:v0.9.10-build20251111,harvester/master,libssl3,3.5.4-r0,alpine,CVE-2025-15467,CRITICAL,https://avd.aquasec.com/nvd/cve-2025-15467,rancher/klipper-helm:v0.9.10-build20251111 (alpine 3.22.2),3.5.5-r0,false,not_affected,vulnerable_code_not_in_execute_path
+rancher/klipper-helm:v0.9.10-build20251111,harvester/master,libssl3,3.5.4-r0,alpine,CVE-2025-69419,HIGH,https://avd.aquasec.com/nvd/cve-2025-69419,rancher/klipper-helm:v0.9.10-build20251111 (alpine 3.22.2),3.5.5-r0,false,not_affected,vulnerable_code_not_in_execute_path
 rancher/klipper-helm:v0.9.10-build20251111,harvester/master,stdlib,v1.24.10,gobinary,CVE-2025-61726,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61726,home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis,"1.24.12, 1.25.6",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/klipper-helm:v0.9.10-build20251111,harvester/master,stdlib,v1.24.10,gobinary,CVE-2025-61728,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61728,home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis,"1.24.12, 1.25.6",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/klipper-helm:v0.9.10-build20251111,harvester/master,stdlib,v1.24.10,gobinary,CVE-2025-61729,HIGH,https://avd.aquasec.com/nvd/cve-2025-61729,home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis,"1.24.11, 1.25.5",false,affected,
@@ -838,8 +838,8 @@ rancher/klipper-helm:v0.9.10-build20251111,harvester/master,golang.org/x/crypto,
 rancher/klipper-helm:v0.9.10-build20251111,harvester/master,golang.org/x/crypto,v0.43.0,gobinary,CVE-2025-58181,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58181,usr/bin/helm,0.45.0,false,not_affected,vulnerable_code_not_present
 rancher/klipper-lb:v0.4.13,harvester/master,libcrypto3,3.3.3-r0,alpine,CVE-2025-15467,CRITICAL,https://avd.aquasec.com/nvd/cve-2025-15467,rancher/klipper-lb:v0.4.13 (alpine 3.21.3),3.3.6-r0,false,affected,
 rancher/klipper-lb:v0.4.13,harvester/master,libcrypto3,3.3.3-r0,alpine,CVE-2025-69419,HIGH,https://avd.aquasec.com/nvd/cve-2025-69419,rancher/klipper-lb:v0.4.13 (alpine 3.21.3),3.3.6-r0,false,affected,
-rancher/klipper-lb:v0.4.13,harvester/master,libssl3,3.3.3-r0,alpine,CVE-2025-15467,CRITICAL,https://avd.aquasec.com/nvd/cve-2025-15467,rancher/klipper-lb:v0.4.13 (alpine 3.21.3),3.3.6-r0,false,affected,
-rancher/klipper-lb:v0.4.13,harvester/master,libssl3,3.3.3-r0,alpine,CVE-2025-69419,HIGH,https://avd.aquasec.com/nvd/cve-2025-69419,rancher/klipper-lb:v0.4.13 (alpine 3.21.3),3.3.6-r0,false,affected,
+rancher/klipper-lb:v0.4.13,harvester/master,libssl3,3.3.3-r0,alpine,CVE-2025-15467,CRITICAL,https://avd.aquasec.com/nvd/cve-2025-15467,rancher/klipper-lb:v0.4.13 (alpine 3.21.3),3.3.6-r0,false,not_affected,vulnerable_code_not_in_execute_path
+rancher/klipper-lb:v0.4.13,harvester/master,libssl3,3.3.3-r0,alpine,CVE-2025-69419,HIGH,https://avd.aquasec.com/nvd/cve-2025-69419,rancher/klipper-lb:v0.4.13 (alpine 3.21.3),3.3.6-r0,false,not_affected,vulnerable_code_not_in_execute_path
 rancher/kubectl:v1.29.2,harvester/master,google.golang.org/protobuf,v1.31.0,gobinary,CVE-2024-24786,HIGH,https://avd.aquasec.com/nvd/cve-2024-24786,bin/kubectl,1.33.0,false,affected,severity_changed_due_to_suse_cvss_score
 rancher/kubectl:v1.29.2,harvester/master,stdlib,v1.21.7,gobinary,CVE-2024-24790,MEDIUM,https://avd.aquasec.com/nvd/cve-2024-24790,bin/kubectl,"1.21.11, 1.22.4",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/kubectl:v1.29.2,harvester/master,stdlib,v1.21.7,gobinary,CVE-2023-45288,MEDIUM,https://avd.aquasec.com/nvd/cve-2023-45288,bin/kubectl,"1.21.9, 1.22.2",false,affected,severity_changed_due_to_suse_cvss_score
@@ -1254,10 +1254,10 @@ rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,libgio-2_0-0
 rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,libglib-2_0-0,2.78.6-150600.4.16.1,sles,SUSE-SU-2026:0018-1,HIGH,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),2.78.6-150600.4.25.1,false,affected,
 rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,libgmodule-2_0-0,2.78.6-150600.4.16.1,sles,SUSE-SU-2026:0018-1,HIGH,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),2.78.6-150600.4.25.1,false,affected,
 rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,libgobject-2_0-0,2.78.6-150600.4.16.1,sles,SUSE-SU-2026:0018-1,HIGH,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),2.78.6-150600.4.25.1,false,affected,
-rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,libopenssl-3-devel,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),3.2.3-150700.5.24.1,false,affected,
-rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,libopenssl-3-fips-provider,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),3.2.3-150700.5.24.1,false,affected,
-rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,libopenssl3,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),3.2.3-150700.5.24.1,false,affected,
-rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,openssl-3,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),3.2.3-150700.5.24.1,false,affected,
+rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,libopenssl-3-devel,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),3.2.3-150700.5.24.1,false,not_affected,vulnerable_code_not_in_execute_path
+rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,libopenssl-3-fips-provider,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),3.2.3-150700.5.24.1,false,not_affected,vulnerable_code_not_in_execute_path
+rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,libopenssl3,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),3.2.3-150700.5.24.1,false,not_affected,vulnerable_code_not_in_execute_path
+rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,openssl-3,3.2.3-150700.5.21.1,sles,SUSE-SU-2026:0309-1,CRITICAL,,rancher/nginx-ingress-controller:v1.13.4-hardened1 (sles 15.7),3.2.3-150700.5.24.1,false,not_affected,vulnerable_code_not_in_execute_path
 rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,stdlib,v1.25.3,gobinary,CVE-2025-61726,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61726,dbg,"1.24.12, 1.25.6",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,stdlib,v1.25.3,gobinary,CVE-2025-61728,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61728,dbg,"1.24.12, 1.25.6",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/nginx-ingress-controller:v1.13.4-hardened1,harvester/master,stdlib,v1.25.3,gobinary,CVE-2025-61729,HIGH,https://avd.aquasec.com/nvd/cve-2025-61729,dbg,"1.24.11, 1.25.5",false,affected,

docs/csv/report-harvester-master-stats.csv

@@ -19,15 +19,15 @@ longhornio/support-bundle-kit:v0.0.79,3,1,4
 rancher/fleet-agent:v0.14.0,0,3,3
 rancher/fleet:v0.14.0,3,6,9
 rancher/hardened-addon-resizer:1.8.23-build20251016,0,2,2
-rancher/hardened-calico:v3.30.3-build20251015,2,0,2
+rancher/hardened-calico:v3.30.3-build20251015,0,0,0
 rancher/hardened-cluster-autoscaler:v1.10.2-build20251015,0,2,2
 rancher/hardened-cni-plugins:v1.8.0-build20251014,0,1,1
 rancher/hardened-coredns:v1.13.1-build20251015,0,5,5
 rancher/hardened-dns-node-cache:1.26.7-build20251016,0,4,4
 rancher/hardened-etcd:v3.6.5-k3s1-build20251017,0,4,4
 rancher/hardened-flannel:v0.27.4-build20251015,0,3,3
 rancher/hardened-k8s-metrics-server:v0.8.0-build20251015,0,2,2
-rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,3,14,17
+rancher/hardened-kubernetes:v1.34.2-rke2r1-build20251112,0,14,14
 rancher/hardened-multus-cni:v4.2.3-build20251031,0,10,10
 rancher/harvester-cluster-repo:master-head,0,0,0
 rancher/harvester-eventrouter:master-head,0,1,1
@@ -48,8 +48,8 @@ rancher/harvester-upgrade:master-head,1,19,20
 rancher/harvester-vm-import-controller:main-head,0,1,1
 rancher/harvester-webhook:master-head,0,5,5
 rancher/harvester:master-head,0,5,5
-rancher/klipper-helm:v0.9.10-build20251111,2,8,10
-rancher/klipper-lb:v0.4.13,2,2,4
+rancher/klipper-helm:v0.9.10-build20251111,1,7,8
+rancher/klipper-lb:v0.4.13,1,1,2
 rancher/kubectl:v1.29.2,0,10,10
 rancher/kubectl:v1.32.3,0,4,4
 rancher/kubectl:v1.33.1,0,5,5
@@ -74,7 +74,7 @@ rancher/mirrored-prometheus-operator-admission-webhook:v0.80.1,0,4,4
 rancher/mirrored-prometheus-operator-prometheus-config-reloader:v0.80.1,0,4,4
 rancher/mirrored-prometheus-operator-prometheus-operator:v0.80.1,0,4,4
 rancher/mirrored-sig-storage-snapshot-controller:v8.2.0,0,4,4
-rancher/nginx-ingress-controller:v1.13.4-hardened1,4,12,16
+rancher/nginx-ingress-controller:v1.13.4-hardened1,0,12,12
 rancher/prom-prometheus:v3.2.1,0,8,8
 rancher/rancher-agent:v2.13.0,1,9,10
 rancher/rancher-webhook:v0.9.1,0,5,5