Skip to content

Instantly share code, notes, and snippets.

@ihcsim

ihcsim/gomod-vex-report.json

Created August 3, 2026 04:34
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ihcsim/8baeccba350beb9b7e89b4a16072e883 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ihcsim/8baeccba350beb9b7e89b4a16072e883 to your computer and use it in GitHub Desktop.
Download ZIP
gomod-vex image report for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1,docker.io/rancher/hardened-kubernetes:v1.36.3-rke2r1-build20260723,docker.io/rancher/hardened-coredns:v1.14.6-build20260722,docker.io/rancher/hardened-cluster-autoscaler:v1.10.3-build20260717,docker.io/rancher/hardened-dns-node-cache:1.26.8-build20260722,docker.io/ranch…
Raw
gomod-vex-report.json
[
{
"target": "docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/bin/containerd",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/bin/kubelet",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/hardened-kubernetes:v1.36.3-rke2r1-build20260723",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/usr/local/bin/kube-apiserver",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/kube-controller-manager",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/kube-proxy",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/kube-scheduler",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/kubelet",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/hardened-coredns:v1.14.6-build20260722",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/coredns",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/hardened-cluster-autoscaler:v1.10.3-build20260717",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "docker.io/rancher/hardened-dns-node-cache:1.26.8-build20260722",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/node-cache",
"module": "golang.org/x/crypto",
"version": "v0.52.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/hardened-etcd:v3.6.14-k3s1-build20260723",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/usr/local/bin/etcd",
"module": "golang.org/x/crypto",
"version": "v0.52.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/hardened-k8s-metrics-server:v0.9.0-build20260722",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/metrics-server",
"module": "golang.org/x/crypto",
"version": "v0.52.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/hardened-addon-resizer:1.8.23-build20260717",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "docker.io/rancher/klipper-helm:v0.13.3-build20260727",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-mapkubeapis/bin/mapkubeapis",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/home/klipper-helm/.local/share/helm/plugins/helm-set-status/helm-set-status",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/helm",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/klipper-lb:v0.4.17",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "docker.io/rancher/mirrored-pause:3.10.2",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "docker.io/rancher/rke2-cloud-provider:v1.36.2-0.20260610225606-10b320a3ba51-build20260709",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/rke2-cloud-provider",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/hardened-snapshot-controller:v8.6.0-build20260722",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/snapshot-controller",
"module": "golang.org/x/crypto",
"version": "v0.52.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/hardened-traefik:v3.7.8-build20260717",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/traefik",
"module": "golang.org/x/crypto",
"version": "v0.52.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/hardened-calico:v3.32.1-build20260722",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/calicoctl",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/opt/cni/bin/calico",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/opt/cni/bin/calico-ipam",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/calico-node",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/kube-controllers",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "docker.io/rancher/hardened-flannel:v0.28.8-build20260722",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/opt/bin/flanneld",
"module": "golang.org/x/crypto",
"version": "v0.53.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
}
]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment