Skip to content

Instantly share code, notes, and snippets.

@ihcsim
Created August 10, 2026 18:05
Show Gist options
  • Select an option

  • Save ihcsim/976525887d0c584acb95a3980d280b77 to your computer and use it in GitHub Desktop.

Select an option

Save ihcsim/976525887d0c584acb95a3980d280b77 to your computer and use it in GitHub Desktop.
vexscan image report for docker.io/rancher/klipper-helm:v0.11.1-build20260615, docker.io/rancher/klipper-lb:v0.4.17, docker.io/rancher/local-path-provisioner:v0.0.36, docker.io/rancher/mirrored-coredns-coredns:1.14.4, docker.io/rancher/mirrored-library-busybox:1.37.0, docker.io/rancher/mirrored-library-traefik:3.7.4, docker.io/rancher/mirrored-m…
vexscan report (image) for docker.io/rancher/klipper-helm:v0.11.1-build20260615
scanned by: vexscan (devel) -- 2026-08-10 18:04 UTC, 56.8s -- advisories from https://api.osv.dev/v1
golang Go 1 components 42 findings
os 0 components 0 findings
RULED OUT (42) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS
CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.47.0 …tatus/helm-set-status no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.47.0 /usr/bin/helm no fix pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.47.0 /usr/bin/helm 0.52.0 pclntab
golang Go 1 components 42 findings
os 0 components 0 findings
42 findings in 1 section(s): RULED OUT (42)
vexscan report (image) for docker.io/rancher/klipper-lb:v0.4.17
scanned by: vexscan (devel) -- 2026-08-10 18:04 UTC, 56.8s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/local-path-provisioner:v0.0.36
scanned by: vexscan (devel) -- 2026-08-10 18:04 UTC, 56.8s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/mirrored-coredns-coredns:1.14.4
scanned by: vexscan (devel) -- 2026-08-10 18:04 UTC, 56.8s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
os 0 components 0 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 /coredns pclntab
golang Go 1 components 1 findings
os 0 components 0 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/mirrored-library-busybox:1.37.0
scanned by: vexscan (devel) -- 2026-08-10 18:04 UTC, 56.8s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/mirrored-library-traefik:3.7.4
scanned by: vexscan (devel) -- 2026-08-10 18:04 UTC, 56.8s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
os 0 components 0 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 /usr/local/bin/traefik pclntab
golang Go 1 components 1 findings
os 0 components 0 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/mirrored-metrics-server:v0.8.1
scanned by: vexscan (devel) -- 2026-08-10 18:04 UTC, 56.8s -- advisories from https://api.osv.dev/v1
golang Go 1 components 17 findings
os 0 components 0 findings
RULED OUT (17) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS
CRITICAL GO-2026-5005 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
UNKNOWN GO-2025-4116 golang.org/x/crypto v0.38.0 /metrics-server 0.43.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.38.0 /metrics-server no fix pclntab
MEDIUM GO-2025-4134 golang.org/x/crypto v0.38.0 /metrics-server 0.45.0 pclntab
MEDIUM GO-2025-4135 golang.org/x/crypto v0.38.0 /metrics-server 0.45.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.38.0 /metrics-server 0.52.0 pclntab
golang Go 1 components 17 findings
os 0 components 0 findings
17 findings in 1 section(s): RULED OUT (17)
vexscan report (image) for docker.io/rancher/mirrored-pause:3.6
scanned by: vexscan (devel) -- 2026-08-10 18:04 UTC, 56.8s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment