Skip to content

Instantly share code, notes, and snippets.

@ihcsim

ihcsim/gomod-vex-report.json

Created August 3, 2026 04:46
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ihcsim/0f10107b5cd032102d05e56cabf7015f to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ihcsim/0f10107b5cd032102d05e56cabf7015f to your computer and use it in GitHub Desktop.
Download ZIP
gomod-vex image report for docker.io/rancher/klipper-helm:v0.11.1-build20260615,docker.io/rancher/klipper-lb:v0.4.17,docker.io/rancher/local-path-provisioner:v0.0.36,docker.io/rancher/mirrored-coredns-coredns:1.14.4,docker.io/rancher/mirrored-library-busybox:1.37.0,docker.io/rancher/mirrored-library-traefik:3.7.4,docker.io/rancher/mirrored-metri…
Raw
gomod-vex-report.json
[
{
"target": "docker.io/rancher/klipper-helm:v0.11.1-build20260615",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/klipper-lb:v0.4.17",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "docker.io/rancher/local-path-provisioner:v0.0.36",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "docker.io/rancher/mirrored-coredns-coredns:1.14.4",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/coredns",
"module": "golang.org/x/crypto",
"version": "v0.52.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/mirrored-library-busybox:1.37.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "docker.io/rancher/mirrored-library-traefik:3.7.4",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/usr/local/bin/traefik",
"module": "golang.org/x/crypto",
"version": "v0.52.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/mirrored-metrics-server:v0.8.1",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2025-4116",
"go_id": "GO-2025-4116",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2025-4134",
"go_id": "GO-2025-4134",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2025-4135",
"go_id": "GO-2025-4135",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.38.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/mirrored-pause:3.6",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
}
]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment