Skip to content

Instantly share code, notes, and snippets.

@ihcsim
Created August 7, 2026 05:15
Show Gist options
  • Select an option

  • Save ihcsim/8d9e700198587675ba874625dfcda76d to your computer and use it in GitHub Desktop.

Select an option

Save ihcsim/8d9e700198587675ba874625dfcda76d to your computer and use it in GitHub Desktop.
vexscan image report for rancher/rancher:latest, rancher/rancher:head
vexscan report (image) for rancher/rancher:latest
scanned by: vexscan (devel) -- 2026-08-07 05:12 UTC, 2m2.9s -- advisories from https://api.osv.dev/v1
golang Go 6 components 118 findings
os 0 components 0 findings
affected by severity: 12 critical, 6 high, 2 unknown, 11 medium
31 affected: 11 unique advisories, 29 fixable, 2 with no fix yet
AFFECTED (31) - vulnerable code is present and can be loaded
SEVERITY ADVISORY PACKAGE VERSION FIXED IN BASIS
CRITICAL GO-2026-5017 golang.org/x/crypto v0.40.0 0.52.0
CRITICAL GO-2026-5017 golang.org/x/crypto v0.48.0 0.52.0
CRITICAL GO-2026-5017 golang.org/x/crypto v0.44.0 0.52.0
CRITICAL GO-2026-5019 golang.org/x/crypto v0.40.0 0.52.0
CRITICAL GO-2026-5019 golang.org/x/crypto v0.48.0 0.52.0
CRITICAL GO-2026-5019 golang.org/x/crypto v0.44.0 0.52.0
CRITICAL GO-2026-5020 golang.org/x/crypto v0.40.0 0.52.0
CRITICAL GO-2026-5020 golang.org/x/crypto v0.48.0 0.52.0
CRITICAL GO-2026-5020 golang.org/x/crypto v0.44.0 0.52.0
CRITICAL GO-2026-5023 golang.org/x/crypto v0.40.0 0.52.0
CRITICAL GO-2026-5023 golang.org/x/crypto v0.48.0 0.52.0
CRITICAL GO-2026-5023 golang.org/x/crypto v0.44.0 0.52.0
HIGH GO-2026-5013 golang.org/x/crypto v0.40.0 0.52.0
HIGH GO-2026-5013 golang.org/x/crypto v0.48.0 0.52.0
HIGH GO-2026-5013 golang.org/x/crypto v0.44.0 0.52.0
HIGH GO-2026-5018 golang.org/x/crypto v0.40.0 0.52.0
HIGH GO-2026-5018 golang.org/x/crypto v0.48.0 0.52.0
HIGH GO-2026-5018 golang.org/x/crypto v0.44.0 0.52.0
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.45.0 no fix
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.45.0 no fix
MEDIUM GO-2025-4134 golang.org/x/crypto v0.40.0 0.45.0
MEDIUM GO-2025-4134 golang.org/x/crypto v0.44.0 0.45.0
MEDIUM GO-2026-5014 golang.org/x/crypto v0.40.0 0.52.0
MEDIUM GO-2026-5014 golang.org/x/crypto v0.48.0 0.52.0
MEDIUM GO-2026-5014 golang.org/x/crypto v0.44.0 0.52.0
MEDIUM GO-2026-5015 golang.org/x/crypto v0.40.0 0.52.0
MEDIUM GO-2026-5015 golang.org/x/crypto v0.48.0 0.52.0
MEDIUM GO-2026-5015 golang.org/x/crypto v0.44.0 0.52.0
MEDIUM GO-2026-5016 golang.org/x/crypto v0.40.0 0.52.0
MEDIUM GO-2026-5016 golang.org/x/crypto v0.48.0 0.52.0
MEDIUM GO-2026-5016 golang.org/x/crypto v0.44.0 0.52.0
RULED OUT (87) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION FIXED IN BASIS
CRITICAL GO-2026-5005 golang.org/x/crypto v0.40.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.44.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.46.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.40.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.44.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.46.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.46.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.46.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.46.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.40.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.44.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.46.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.45.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.48.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.46.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.45.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.45.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.48.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.48.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.46.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.45.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.45.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.48.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.48.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.46.0 0.52.0 pclntab
UNKNOWN GO-2025-4116 golang.org/x/crypto v0.40.0 0.43.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.40.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.48.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.44.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.48.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.48.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.46.0 no fix pclntab
MEDIUM GO-2025-4135 golang.org/x/crypto v0.40.0 0.45.0 pclntab
MEDIUM GO-2025-4135 golang.org/x/crypto v0.44.0 0.45.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.45.0 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.45.0 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.48.0 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.48.0 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.46.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.45.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.45.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.48.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.48.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.46.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.45.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.45.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.48.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.48.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.46.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.40.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.48.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.45.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.45.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.44.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.48.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.48.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.46.0 0.52.0 pclntab
golang Go 6 components 118 findings
os 0 components 0 findings
affected by severity: 12 critical, 6 high, 2 unknown, 11 medium
31 affected: 11 unique advisories, 29 fixable, 2 with no fix yet
118 findings in 2 section(s): AFFECTED (31), RULED OUT (87)
vexscan report (image) for rancher/rancher:head
scanned by: vexscan (devel) -- 2026-08-07 05:12 UTC, 2m2.9s -- advisories from https://api.osv.dev/v1
golang Go 5 components 89 findings
os 0 components 0 findings
affected by severity: 4 critical, 2 high, 2 unknown, 4 medium
12 affected: 11 unique advisories, 10 fixable, 2 with no fix yet
AFFECTED (12) - vulnerable code is present and can be loaded
SEVERITY ADVISORY PACKAGE VERSION FIXED IN BASIS
CRITICAL GO-2026-5017 golang.org/x/crypto v0.40.0 0.52.0
CRITICAL GO-2026-5019 golang.org/x/crypto v0.40.0 0.52.0
CRITICAL GO-2026-5020 golang.org/x/crypto v0.40.0 0.52.0
CRITICAL GO-2026-5023 golang.org/x/crypto v0.40.0 0.52.0
HIGH GO-2026-5013 golang.org/x/crypto v0.40.0 0.52.0
HIGH GO-2026-5018 golang.org/x/crypto v0.40.0 0.52.0
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.47.0 no fix
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.47.0 no fix
MEDIUM GO-2025-4134 golang.org/x/crypto v0.40.0 0.45.0
MEDIUM GO-2026-5014 golang.org/x/crypto v0.40.0 0.52.0
MEDIUM GO-2026-5015 golang.org/x/crypto v0.40.0 0.52.0
MEDIUM GO-2026-5016 golang.org/x/crypto v0.40.0 0.52.0
RULED OUT (77) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION FIXED IN BASIS
CRITICAL GO-2026-5005 golang.org/x/crypto v0.40.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.40.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.40.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.47.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.47.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.47.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.47.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.47.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 0.52.0 pclntab
UNKNOWN GO-2025-4116 golang.org/x/crypto v0.40.0 0.43.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.40.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.54.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 no fix pclntab
MEDIUM GO-2025-4135 golang.org/x/crypto v0.40.0 0.45.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.47.0 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.47.0 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.47.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.47.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.47.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.47.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.40.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.47.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.47.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 0.52.0 pclntab
golang Go 5 components 89 findings
os 0 components 0 findings
affected by severity: 4 critical, 2 high, 2 unknown, 4 medium
12 affected: 11 unique advisories, 10 fixable, 2 with no fix yet
89 findings in 2 section(s): AFFECTED (12), RULED OUT (77)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment