Skip to content

Commit c3cb1ea

Browse files
rancher-security-team[bot]rancher-security-team[bot]
committed
Update CVE scans reports - 2025-11-20
1 parent 0ee7633 commit c3cb1ea

19 files changed

+347
-1214
lines changed

‎docs/csv/report-harvester-master-cves.csv‎

Lines changed: 13 additions & 54 deletions
Large diffs are not rendered by default.

‎docs/csv/report-harvester-master-stats.csv‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -93,6 +93,12 @@ rancher/system-agent:v0.3.14-rc.4-suc,0,4,4
9393
rancher/system-upgrade-controller:v0.17.0,0,2,2
9494
registry.k8s.io/descheduler/descheduler:v0.33.0,0,3,3
9595
registry.k8s.io/sig-storage/snapshot-controller:v8.3.0,0,3,3
96+
registry.opensuse.org/isv/rancher/harvester/containers/v1.7/15.7/suse/sles/15.7/libguestfs-tools:1.6.3,0,0,0
97+
registry.opensuse.org/isv/rancher/harvester/containers/v1.7/15.7/suse/sles/15.7/virt-api:1.6.3,0,0,0
98+
registry.opensuse.org/isv/rancher/harvester/containers/v1.7/15.7/suse/sles/15.7/virt-controller:1.6.3,0,1,1
99+
registry.opensuse.org/isv/rancher/harvester/containers/v1.7/15.7/suse/sles/15.7/virt-handler:1.6.3,0,8,8
100+
registry.opensuse.org/isv/rancher/harvester/containers/v1.7/15.7/suse/sles/15.7/virt-launcher:1.6.3,0,4,4
101+
registry.opensuse.org/isv/rancher/harvester/containers/v1.7/15.7/suse/sles/15.7/virt-operator:1.6.3,0,0,0
96102
registry.suse.com/bci/bci-base:15.7,0,0,0
97103
registry.suse.com/suse/sles/15.7/cdi-apiserver:1.62.0-150700.9.3.1,3,9,12
98104
registry.suse.com/suse/sles/15.7/cdi-cloner:1.62.0-150700.9.3.1,3,9,12
@@ -101,10 +107,4 @@ registry.suse.com/suse/sles/15.7/cdi-importer:1.62.0-150700.9.3.1,3,10,13
101107
registry.suse.com/suse/sles/15.7/cdi-operator:1.62.0-150700.9.3.1,3,9,12
102108
registry.suse.com/suse/sles/15.7/cdi-uploadproxy:1.62.0-150700.9.3.1,3,9,12
103109
registry.suse.com/suse/sles/15.7/cdi-uploadserver:1.62.0-150700.9.3.1,3,10,13
104-
registry.suse.com/suse/sles/15.7/libguestfs-tools:1.6.0-150700.3.8.1,0,14,14
105-
registry.suse.com/suse/sles/15.7/virt-api:1.6.0-150700.3.8.1,0,7,7
106-
registry.suse.com/suse/sles/15.7/virt-controller:1.6.0-150700.3.8.1,0,7,7
107-
registry.suse.com/suse/sles/15.7/virt-handler:1.6.0-150700.3.8.1,0,9,9
108-
registry.suse.com/suse/sles/15.7/virt-launcher:1.6.0-150700.3.8.1,0,10,10
109-
registry.suse.com/suse/sles/15.7/virt-operator:1.6.0-150700.3.8.1,0,7,7
110110
registry.suse.com/suse/vmdp/vmdp:2.5.5,0,0,0

‎docs/csv/report-observability-v2.6-dev-cves.csv‎

Lines changed: 50 additions & 75 deletions
Large diffs are not rendered by default.

‎docs/csv/report-observability-v2.6-dev-stats.csv‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -3,16 +3,17 @@ quay.io/stackstate/clickhouse:25.9.5-85835861-137,0,0,0
33
quay.io/stackstate/hadoop:3.4.2-java21-8-be24ca0f,0,0,0
44
quay.io/stackstate/hbase-master:2.5-7.13.2,0,4,4
55
quay.io/stackstate/hbase-regionserver:2.5-7.13.2,0,4,4
6-
quay.io/stackstate/kafka:3.9.1-17ef1d95,1,1,2
6+
quay.io/stackstate/kafka:3.9.1-17ef1d95,0,1,1
7+
quay.io/stackstate/minio:RELEASE.2025-11-19T12-41-50Z-15bb6f44-162,0,0,0
78
quay.io/stackstate/spotlight:5.2.0-snapshot.175,0,0,0
89
quay.io/stackstate/stackgraph-console:2.5-7.13.2,0,4,4
910
quay.io/stackstate/stackgraph-hbase:2.5-7.13.2,0,4,4
1011
quay.io/stackstate/stackpacks:20251119095051-master-039b12e-prime-selfhosted,0,0,0
11-
quay.io/stackstate/stackstate-correlate:7.0.0-snapshot.20251119112942-master-469de22,0,8,8
12-
quay.io/stackstate/stackstate-kafka-to-es:7.0.0-snapshot.20251119112942-master-469de22,0,8,8
13-
quay.io/stackstate/stackstate-receiver:7.0.0-snapshot.20251119112942-master-469de22,0,8,8
14-
quay.io/stackstate/stackstate-server:7.0.0-snapshot.20251119112942-master-469de22-2.5,0,13,13
15-
quay.io/stackstate/stackstate-ui:7.0.0-snapshot.20251119112942-master-469de22,0,0,0
12+
quay.io/stackstate/stackstate-correlate:7.0.0-snapshot.20251119163808-master-b3f11b9,0,8,8
13+
quay.io/stackstate/stackstate-kafka-to-es:7.0.0-snapshot.20251119163808-master-b3f11b9,0,8,8
14+
quay.io/stackstate/stackstate-receiver:7.0.0-snapshot.20251119163808-master-b3f11b9,0,8,8
15+
quay.io/stackstate/stackstate-server:7.0.0-snapshot.20251119163808-master-b3f11b9-2.5,0,13,13
16+
quay.io/stackstate/stackstate-ui:7.0.0-snapshot.20251119163808-master-b3f11b9,0,0,0
1617
quay.io/stackstate/tephra-server:2.5-7.13.2,0,4,4
1718
registry.rancher.com/suse-observability/clickhouse-backup:2.6.38-9157204e,0,10,10
1819
registry.rancher.com/suse-observability/container-tools:1.8.0-bci,0,19,19
@@ -22,7 +23,6 @@ registry.rancher.com/suse-observability/envoy:v1.31.1-92f410cd,0,0,0
2223
registry.rancher.com/suse-observability/jmx-exporter:0.17.0-e3374eb0,0,4,4
2324
registry.rancher.com/suse-observability/kafkaup-operator:0.0.4,0,4,4
2425
registry.rancher.com/suse-observability/kubernetes-rbac-agent:35ec5206,0,2,2
25-
registry.rancher.com/suse-observability/minio:RELEASE.2025-01-13T16-22-00Z-4ae4220f,0,18,18
2626
registry.rancher.com/suse-observability/nginx-prometheus-exporter:1.4.0-11589218739,0,5,5
2727
registry.rancher.com/suse-observability/sts-opentelemetry-collector:v0.0.22,0,0,0
2828
registry.rancher.com/suse-observability/victoria-metrics:v1.109.0-accea47f,0,3,3

‎docs/csv/report-observability-v2.6.2-cves.csv‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -150,7 +150,6 @@ registry.rancher.com/suse-observability/kafka:3.6.2-aec2a402,observability/v2.6.
150150
registry.rancher.com/suse-observability/kafka:3.6.2-aec2a402,observability/v2.6.2,commons-io:commons-io,2.11.0,jar,CVE-2024-47554,HIGH,https://avd.aquasec.com/nvd/cve-2024-47554,Java,2.14.0,false,affected,
151151
registry.rancher.com/suse-observability/kafka:3.6.2-aec2a402,observability/v2.6.2,io.netty:netty-handler,4.1.100.Final,jar,CVE-2025-24970,HIGH,https://avd.aquasec.com/nvd/cve-2025-24970,Java,4.1.118.Final,false,affected,
152152
registry.rancher.com/suse-observability/kafka:3.6.2-aec2a402,observability/v2.6.2,org.eclipse.jetty:jetty-server,9.4.53.v20231009,jar,CVE-2024-13009,HIGH,https://avd.aquasec.com/nvd/cve-2024-13009,Java,9.4.57.v20241219,false,affected,
153-
registry.rancher.com/suse-observability/kafka:3.6.2-aec2a402,observability/v2.6.2,org.glassfish.jersey.core:jersey-client,2.39.1,jar,CVE-2025-12383,CRITICAL,https://avd.aquasec.com/nvd/cve-2025-12383,Java,"2.46, 3.0.17, 3.1.10, 4.0.0-M2",false,affected,
154153
registry.rancher.com/suse-observability/kafkaup-operator:0.0.4,observability/v2.6.2,golang.org/x/crypto,v0.31.0,gobinary,CVE-2025-22869,HIGH,https://avd.aquasec.com/nvd/cve-2025-22869,kafkaup-operator,0.35.0,false,affected,
155154
registry.rancher.com/suse-observability/kafkaup-operator:0.0.4,observability/v2.6.2,golang.org/x/oauth2,v0.0.0-20200107190931-bf48bf16ab8d,gobinary,CVE-2025-22868,HIGH,https://avd.aquasec.com/nvd/cve-2025-22868,kafkaup-operator,0.27.0,false,affected,
156155
registry.rancher.com/suse-observability/kafkaup-operator:0.0.4,observability/v2.6.2,gopkg.in/yaml.v3,v3.0.0-20220521103104-8f96da9f5d5e,gobinary,CVE-2022-28948,MEDIUM,https://avd.aquasec.com/nvd/cve-2022-28948,kafkaup-operator,3.0.1,false,affected,severity_changed_due_to_suse_cvss_score

‎docs/csv/report-observability-v2.6.2-stats.csv‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ registry.rancher.com/suse-observability/hadoop:3.4.1-java21-8-11835454,0,20,20
99
registry.rancher.com/suse-observability/hbase-master:2.5-7.11.11,0,14,14
1010
registry.rancher.com/suse-observability/hbase-regionserver:2.5-7.11.11,0,14,14
1111
registry.rancher.com/suse-observability/jmx-exporter:0.17.0-e3374eb0,0,4,4
12-
registry.rancher.com/suse-observability/kafka:3.6.2-aec2a402,1,5,6
12+
registry.rancher.com/suse-observability/kafka:3.6.2-aec2a402,0,5,5
1313
registry.rancher.com/suse-observability/kafkaup-operator:0.0.4,0,4,4
1414
registry.rancher.com/suse-observability/kubernetes-rbac-agent:35ec5206,0,2,2
1515
registry.rancher.com/suse-observability/minio:RELEASE.2025-01-13T16-22-00Z-4ae4220f,0,18,18

‎docs/csv/report-rancher-head-cves.csv‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4475,13 +4475,13 @@ rancher/rancher-csp-adapter:v8.0.0,rancher/head,stdlib,v1.24.6,gobinary,CVE-2025
44754475
rancher/rancher-csp-adapter:v8.0.0,rancher/head,stdlib,v1.24.6,gobinary,CVE-2025-58187,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58187,usr/bin/csp-adapter,"1.24.9, 1.25.3",false,affected,severity_changed_due_to_suse_cvss_score
44764476
rancher/rancher-csp-adapter:v8.0.0,rancher/head,stdlib,v1.24.6,gobinary,CVE-2025-58188,HIGH,https://avd.aquasec.com/nvd/cve-2025-58188,usr/bin/csp-adapter,"1.24.8, 1.25.2",false,affected,
44774477
rancher/rancher-csp-adapter:v8.0.0,rancher/head,stdlib,v1.24.6,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,usr/bin/csp-adapter,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
4478-
rancher/rancher-webhook:v0.9.0-rc.14,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-22874,HIGH,https://avd.aquasec.com/nvd/cve-2025-22874,usr/bin/webhook,1.24.4,false,affected,
4479-
rancher/rancher-webhook:v0.9.0-rc.14,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-47907,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-47907,usr/bin/webhook,"1.23.12, 1.24.6",false,affected,severity_changed_due_to_suse_cvss_score
4480-
rancher/rancher-webhook:v0.9.0-rc.14,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-58183,LOW,https://avd.aquasec.com/nvd/cve-2025-58183,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
4481-
rancher/rancher-webhook:v0.9.0-rc.14,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-58186,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58186,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
4482-
rancher/rancher-webhook:v0.9.0-rc.14,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-58187,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58187,usr/bin/webhook,"1.24.9, 1.25.3",false,affected,severity_changed_due_to_suse_cvss_score
4483-
rancher/rancher-webhook:v0.9.0-rc.14,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-58188,HIGH,https://avd.aquasec.com/nvd/cve-2025-58188,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,
4484-
rancher/rancher-webhook:v0.9.0-rc.14,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
4478+
rancher/rancher-webhook:v0.9.0,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-22874,HIGH,https://avd.aquasec.com/nvd/cve-2025-22874,usr/bin/webhook,1.24.4,false,affected,
4479+
rancher/rancher-webhook:v0.9.0,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-47907,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-47907,usr/bin/webhook,"1.23.12, 1.24.6",false,affected,severity_changed_due_to_suse_cvss_score
4480+
rancher/rancher-webhook:v0.9.0,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-58183,LOW,https://avd.aquasec.com/nvd/cve-2025-58183,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
4481+
rancher/rancher-webhook:v0.9.0,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-58186,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58186,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
4482+
rancher/rancher-webhook:v0.9.0,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-58187,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58187,usr/bin/webhook,"1.24.9, 1.25.3",false,affected,severity_changed_due_to_suse_cvss_score
4483+
rancher/rancher-webhook:v0.9.0,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-58188,HIGH,https://avd.aquasec.com/nvd/cve-2025-58188,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,
4484+
rancher/rancher-webhook:v0.9.0,rancher/head,stdlib,v1.24.2,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
44854485
rancher/rancher:head,rancher/head,kubevirt.io/kubevirt,v1.5.0,gobinary,CVE-2025-64324,HIGH,https://avd.aquasec.com/nvd/cve-2025-64324,opt/drivers/management-state/bin/docker-machine-driver-harvester,"1.6.1, 1.7.0-rc.0",false,affected,
44864486
rancher/rancher:head,rancher/head,kubevirt.io/kubevirt,v1.5.0,gobinary,CVE-2025-64437,LOW,https://avd.aquasec.com/nvd/cve-2025-64437,opt/drivers/management-state/bin/docker-machine-driver-harvester,"1.5.3, 1.6.1",false,affected,severity_changed_due_to_suse_cvss_score
44874487
rancher/rancher:head,rancher/head,stdlib,v1.25.1,gobinary,CVE-2025-58183,LOW,https://avd.aquasec.com/nvd/cve-2025-58183,opt/drivers/management-state/bin/docker-machine-driver-harvester,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score

‎docs/csv/report-rancher-head-stats.csv‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,11 @@
11
image,critical,high,total
22
rancher/aks-operator:v1.13.0,0,0,0
33
rancher/appco-k8s-sidecar:1.30.7-11.3,0,5,5
4-
rancher/backup-restore-operator:v9.0.0-rc.3,0,0,0
4+
rancher/backup-restore-operator:v9.0.0,0,0,0
55
rancher/compliance-operator:v1.3.0,0,0,0
66
rancher/eks-operator:v1.13.0,0,0,0
7+
rancher/fleet-agent:v0.14.0,0,0,0
8+
rancher/fleet:v0.14.0,0,0,0
79
rancher/gke-operator:v1.13.0,0,0,0
810
rancher/hardened-addon-resizer:1.8.22-build20250110,0,2,2
911
rancher/hardened-addon-resizer:1.8.23-build20250507,0,3,3
@@ -239,7 +241,7 @@ rancher/pushprox-client:v0.1.5-rancher2-client,0,2,2
239241
rancher/pushprox-proxy:v0.1.5-rancher2-proxy,0,2,2
240242
rancher/rancher-agent:head,0,3,3
241243
rancher/rancher-csp-adapter:v8.0.0,0,2,2
242-
rancher/rancher-webhook:v0.9.0-rc.14,0,3,3
244+
rancher/rancher-webhook:v0.9.0,0,3,3
243245
rancher/rancher:head,0,31,31
244246
rancher/remotedialer-proxy:v0.6.0-rc.4,0,2,2
245247
rancher/rke2-cloud-provider:v1.32.0-rc3.0.20241220224140-68fbd1a6b543-build20250101,0,3,3

‎docs/csv/report-rancher-v2.12-head-cves.csv‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -7646,13 +7646,13 @@ rancher/rancher-csp-adapter:v7.0.0,rancher/v2.12-head,stdlib,v1.24.1,gobinary,CV
76467646
rancher/rancher-csp-adapter:v7.0.0,rancher/v2.12-head,stdlib,v1.24.1,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,usr/bin/csp-adapter,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
76477647
rancher/rancher-csp-adapter:v7.0.0,rancher/v2.12-head,golang.org/x/net,v0.36.0,gobinary,CVE-2025-22872,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-22872,usr/bin/csp-adapter,0.38.0,false,not_affected,vulnerable_code_not_present
76487648
rancher/rancher-csp-adapter:v7.0.0,rancher/v2.12-head,golang.org/x/oauth2,v0.26.0,gobinary,CVE-2025-22868,HIGH,https://avd.aquasec.com/nvd/cve-2025-22868,usr/bin/csp-adapter,0.27.0,false,not_affected,vulnerable_code_not_present
7649-
rancher/rancher-webhook:v0.8.4-rc.1,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-22874,HIGH,https://avd.aquasec.com/nvd/cve-2025-22874,usr/bin/webhook,1.24.4,false,affected,
7650-
rancher/rancher-webhook:v0.8.4-rc.1,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-47907,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-47907,usr/bin/webhook,"1.23.12, 1.24.6",false,affected,severity_changed_due_to_suse_cvss_score
7651-
rancher/rancher-webhook:v0.8.4-rc.1,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-58183,LOW,https://avd.aquasec.com/nvd/cve-2025-58183,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
7652-
rancher/rancher-webhook:v0.8.4-rc.1,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-58186,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58186,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
7653-
rancher/rancher-webhook:v0.8.4-rc.1,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-58187,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58187,usr/bin/webhook,"1.24.9, 1.25.3",false,affected,severity_changed_due_to_suse_cvss_score
7654-
rancher/rancher-webhook:v0.8.4-rc.1,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-58188,HIGH,https://avd.aquasec.com/nvd/cve-2025-58188,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,
7655-
rancher/rancher-webhook:v0.8.4-rc.1,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
7649+
rancher/rancher-webhook:v0.8.4,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-22874,HIGH,https://avd.aquasec.com/nvd/cve-2025-22874,usr/bin/webhook,1.24.4,false,affected,
7650+
rancher/rancher-webhook:v0.8.4,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-47907,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-47907,usr/bin/webhook,"1.23.12, 1.24.6",false,affected,severity_changed_due_to_suse_cvss_score
7651+
rancher/rancher-webhook:v0.8.4,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-58183,LOW,https://avd.aquasec.com/nvd/cve-2025-58183,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
7652+
rancher/rancher-webhook:v0.8.4,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-58186,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58186,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
7653+
rancher/rancher-webhook:v0.8.4,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-58187,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58187,usr/bin/webhook,"1.24.9, 1.25.3",false,affected,severity_changed_due_to_suse_cvss_score
7654+
rancher/rancher-webhook:v0.8.4,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-58188,HIGH,https://avd.aquasec.com/nvd/cve-2025-58188,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,
7655+
rancher/rancher-webhook:v0.8.4,rancher/v2.12-head,stdlib,v1.24.2,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,usr/bin/webhook,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
76567656
rancher/rancher:v2.12-head,rancher/v2.12-head,github.com/moby/moby,v1.4.2-0.20170731201646-1009e6a40b29,gobinary,CVE-2021-21284,LOW,https://avd.aquasec.com/nvd/cve-2021-21284,opt/drivers/management-state/bin/docker-machine-driver-harvester,"19.3.15, 20.10.3",false,affected,severity_changed_due_to_suse_cvss_score
76577657
rancher/rancher:v2.12-head,rancher/v2.12-head,kubevirt.io/kubevirt,v1.3.0,gobinary,CVE-2025-64324,HIGH,https://avd.aquasec.com/nvd/cve-2025-64324,opt/drivers/management-state/bin/docker-machine-driver-harvester,"1.6.1, 1.7.0-rc.0",false,affected,
76587658
rancher/rancher:v2.12-head,rancher/v2.12-head,kubevirt.io/kubevirt,v1.3.0,gobinary,CVE-2025-64437,LOW,https://avd.aquasec.com/nvd/cve-2025-64437,opt/drivers/management-state/bin/docker-machine-driver-harvester,"1.5.3, 1.6.1",false,affected,severity_changed_due_to_suse_cvss_score

‎docs/csv/report-rancher-v2.12-head-stats.csv‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ image,critical,high,total
22
rancher/aks-operator:v1.12.3,0,0,0
33
rancher/appco-k8s-sidecar:1.30.7-11.3,0,5,5
44
rancher/appco-redis:8.0.3-2.1,0,1,1
5-
rancher/backup-restore-operator:v8.1.1-rc.1,0,0,0
5+
rancher/backup-restore-operator:v8.1.1,0,0,0
66
rancher/compliance-operator:v1.2.2,0,0,0
77
rancher/eks-operator:v1.12.3,0,0,0
88
rancher/fleet-agent:v0.13.4-rc.2,0,3,3
@@ -356,7 +356,7 @@ rancher/pushprox-client:v0.1.5-rancher2-client,0,2,2
356356
rancher/pushprox-proxy:v0.1.5-rancher2-proxy,0,2,2
357357
rancher/rancher-agent:v2.12-head,0,7,7
358358
rancher/rancher-csp-adapter:v7.0.0,0,3,3
359-
rancher/rancher-webhook:v0.8.4-rc.1,0,3,3
359+
rancher/rancher-webhook:v0.8.4,0,3,3
360360
rancher/rancher:v2.12-head,0,48,48
361361
rancher/remotedialer-proxy:v0.5.0,0,2,2
362362
rancher/rke2-cloud-provider:v1.31.12-rc1.0.20250814215358-2b53c7e4c817-build20250908,0,2,2

0 commit comments

Comments
 (0)