Skip to content

Instantly share code, notes, and snippets.

@ihcsim

ihcsim/vexscan-report.txt

Created August 7, 2026 17:48
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ihcsim/586cc4e3ef39c073ac1890f4864b9fc2 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ihcsim/586cc4e3ef39c073ac1890f4864b9fc2 to your computer and use it in GitHub Desktop.
Download ZIP
vexscan image report for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1, docker.io/rancher/hardened-kubernetes:v1.36.3-rke2r1-build20260723, docker.io/rancher/hardened-coredns:v1.14.6-build20260722, docker.io/rancher/hardened-cluster-autoscaler:v1.10.3-build20260717, docker.io/rancher/hardened-dns-node-cache:1.26.8-build20260722, docker.io/ra…
Raw
vexscan-report.txt
vexscan report (image) for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 2 findings
affected by severity: 1 unknown
1 affected: 1 with no fix yet
AFFECTED (1) - vulnerable code is present and can be loaded
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /bin/containerd
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /bin/kubelet pclntab
vexscan report (image) for docker.io/rancher/hardened-kubernetes:v1.36.3-rke2r1-build20260723
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 5 findings
os 0 components 0 findings
RULED OUT (5) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 …al/bin/kube-apiserver pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 …be-controller-manager pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 …/local/bin/kube-proxy pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 …al/bin/kube-scheduler pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /usr/local/bin/kubelet pclntab
vexscan report (image) for docker.io/rancher/hardened-coredns:v1.14.6-build20260722
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
os 0 components 0 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /coredns pclntab
golang Go 1 components 1 findings
os 0 components 0 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-cluster-autoscaler:v1.10.3-build20260717
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/hardened-dns-node-cache:1.26.8-build20260722
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
os 0 components 0 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 /node-cache pclntab
golang Go 1 components 1 findings
os 0 components 0 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-etcd:v3.6.14-k3s1-build20260723
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 /usr/local/bin/etcd pclntab
golang Go 1 components 1 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-k8s-metrics-server:v0.9.0-build20260722
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 /metrics-server pclntab
golang Go 1 components 1 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-addon-resizer:1.8.23-build20260717
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/klipper-helm:v0.13.3-build20260727
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 42 findings
os 0 components 0 findings
RULED OUT (42) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 …tatus/helm-set-status no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 /usr/bin/helm no fix pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 …tatus/helm-set-status 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 /usr/bin/helm 0.52.0 pclntab
golang Go 1 components 42 findings
os 0 components 0 findings
42 findings in 1 section(s): RULED OUT (42)
vexscan report (image) for docker.io/rancher/klipper-lb:v0.4.17
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/mirrored-pause:3.10.2
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/rke2-cloud-provider:v1.36.2-0.20260610225606-10b320a3ba51-build20260709
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 14 findings
RULED OUT (14) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider no fix pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 …n/rke2-cloud-provider 0.52.0 pclntab
golang Go 1 components 14 findings
14 findings in 1 section(s): RULED OUT (14)
vexscan report (image) for docker.io/rancher/hardened-snapshot-controller:v8.6.0-build20260722
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 /snapshot-controller pclntab
golang Go 1 components 1 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-traefik:v3.7.8-build20260717
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 /traefik pclntab
golang Go 1 components 1 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-calico:v3.32.1-build20260722
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 5 findings
os 0 components 0 findings
RULED OUT (5) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /calicoctl pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /opt/cni/bin/calico pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 …t/cni/bin/calico-ipam pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /usr/bin/calico-node pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 …/bin/kube-controllers pclntab
golang Go 1 components 5 findings
os 0 components 0 findings
5 findings in 1 section(s): RULED OUT (5)
vexscan report (image) for docker.io/rancher/hardened-flannel:v0.28.8-build20260722
scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
os 0 components 0 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /opt/bin/flanneld pclntab
golang Go 1 components 1 findings
os 0 components 0 findings
1 findings in 1 section(s): RULED OUT (1)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment