Created
August 10, 2026 18:13
-
-
Save ihcsim/c0a44389f63a823c0f8591b09c09b356 to your computer and use it in GitHub Desktop.
vexscan image report for longhornio/backing-image-manager:v1.12.0, longhornio/longhorn-engine:v1.12.0, longhornio/longhorn-instance-manager:v1.12.0, longhornio/longhorn-manager:v1.12.0, longhornio/longhorn-share-manager:v1.12.0, longhornio/longhorn-ui:v1.12.0, longhornio/longhorn-cli:v1.12.0, longhornio/csi-attacher:v4.12.0, longhornio/csi-provi…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vexscan report (image) for longhornio/backing-image-manager:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. | |
| vexscan report (image) for longhornio/longhorn-engine:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. | |
| vexscan report (image) for longhornio/longhorn-instance-manager:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. | |
| vexscan report (image) for longhornio/longhorn-manager:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 14 findings | |
| os 0 components 0 findings | |
| pypi 0 components 0 findings | |
| affected by severity: 4 critical, 2 high, 3 medium | |
| 9 affected: 9 fixable, 0 with no fix yet | |
| AFFECTED (9) - vulnerable code is present and can be loaded | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS | |
| CRITICAL GO-2026-5017 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 | |
| CRITICAL GO-2026-5019 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 | |
| CRITICAL GO-2026-5020 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 | |
| CRITICAL GO-2026-5023 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 | |
| HIGH GO-2026-5013 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 | |
| HIGH GO-2026-5018 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 | |
| MEDIUM GO-2026-5014 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 | |
| MEDIUM GO-2026-5015 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 | |
| MEDIUM GO-2026-5016 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 | |
| RULED OUT (5) - the vulnerable code is not present or cannot run | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 pclntab | |
| CRITICAL GO-2026-5006 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 pclntab | |
| CRITICAL GO-2026-5021 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 pclntab | |
| UNKNOWN GO-2026-5932 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager no fix pclntab | |
| MEDIUM GO-2026-5033 golang.org/x/crypto v0.50.0 …sbin/longhorn-manager 0.52.0 pclntab | |
| golang Go 1 components 14 findings | |
| os 0 components 0 findings | |
| pypi 0 components 0 findings | |
| affected by severity: 4 critical, 2 high, 3 medium | |
| 9 affected: 9 fixable, 0 with no fix yet | |
| 14 findings in 2 section(s): AFFECTED (9), RULED OUT (5) | |
| vexscan report (image) for longhornio/longhorn-share-manager:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. | |
| vexscan report (image) for longhornio/longhorn-ui:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. | |
| vexscan report (image) for longhornio/longhorn-cli:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 28 findings | |
| os 0 components 0 findings | |
| affected by severity: 8 critical, 4 high, 6 medium | |
| 18 affected: 9 unique advisories, 18 fixable, 0 with no fix yet | |
| AFFECTED (18) - vulnerable code is present and can be loaded | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS | |
| CRITICAL GO-2026-5017 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 | |
| CRITICAL GO-2026-5017 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 | |
| CRITICAL GO-2026-5019 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 | |
| CRITICAL GO-2026-5019 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 | |
| CRITICAL GO-2026-5020 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 | |
| CRITICAL GO-2026-5020 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 | |
| CRITICAL GO-2026-5023 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 | |
| CRITICAL GO-2026-5023 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 | |
| HIGH GO-2026-5013 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 | |
| HIGH GO-2026-5013 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 | |
| HIGH GO-2026-5018 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 | |
| HIGH GO-2026-5018 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 | |
| MEDIUM GO-2026-5014 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 | |
| MEDIUM GO-2026-5014 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 | |
| MEDIUM GO-2026-5015 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 | |
| MEDIUM GO-2026-5015 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 | |
| MEDIUM GO-2026-5016 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 | |
| MEDIUM GO-2026-5016 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 | |
| RULED OUT (10) - the vulnerable code is not present or cannot run | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 pclntab | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 pclntab | |
| CRITICAL GO-2026-5006 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 pclntab | |
| CRITICAL GO-2026-5006 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 pclntab | |
| CRITICAL GO-2026-5021 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 pclntab | |
| CRITICAL GO-2026-5021 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 pclntab | |
| UNKNOWN GO-2026-5932 golang.org/x/crypto v0.49.0 …local/bin/longhornctl no fix pclntab | |
| UNKNOWN GO-2026-5932 golang.org/x/crypto v0.49.0 …bin/longhornctl-local no fix pclntab | |
| MEDIUM GO-2026-5033 golang.org/x/crypto v0.49.0 …local/bin/longhornctl 0.52.0 pclntab | |
| MEDIUM GO-2026-5033 golang.org/x/crypto v0.49.0 …bin/longhornctl-local 0.52.0 pclntab | |
| golang Go 1 components 28 findings | |
| os 0 components 0 findings | |
| affected by severity: 8 critical, 4 high, 6 medium | |
| 18 affected: 9 unique advisories, 18 fixable, 0 with no fix yet | |
| 28 findings in 2 section(s): AFFECTED (18), RULED OUT (10) | |
| vexscan report (image) for longhornio/csi-attacher:v4.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 14 findings | |
| os 0 components 0 findings | |
| RULED OUT (14) - the vulnerable code is not present or cannot run | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 /csi-attacher no fix pclntab | |
| MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 /csi-attacher 0.52.0 pclntab | |
| golang Go 1 components 14 findings | |
| os 0 components 0 findings | |
| 14 findings in 1 section(s): RULED OUT (14) | |
| vexscan report (image) for longhornio/csi-provisioner:v5.3.0-20260514 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. | |
| vexscan report (image) for longhornio/csi-resizer:v2.1.0-20260514 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 14 findings | |
| os 0 components 0 findings | |
| RULED OUT (14) - the vulnerable code is not present or cannot run | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| CRITICAL GO-2026-5006 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| CRITICAL GO-2026-5017 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| CRITICAL GO-2026-5019 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| CRITICAL GO-2026-5020 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| CRITICAL GO-2026-5021 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| CRITICAL GO-2026-5023 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| HIGH GO-2026-5013 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| HIGH GO-2026-5018 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| UNKNOWN GO-2026-5932 golang.org/x/crypto v0.46.0 /csi-resizer no fix pclntab | |
| MEDIUM GO-2026-5014 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| MEDIUM GO-2026-5015 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| MEDIUM GO-2026-5016 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| MEDIUM GO-2026-5033 golang.org/x/crypto v0.46.0 /csi-resizer 0.52.0 pclntab | |
| golang Go 1 components 14 findings | |
| os 0 components 0 findings | |
| 14 findings in 1 section(s): RULED OUT (14) | |
| vexscan report (image) for longhornio/csi-snapshotter:v8.5.0-20260514 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 14 findings | |
| os 0 components 0 findings | |
| RULED OUT (14) - the vulnerable code is not present or cannot run | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| CRITICAL GO-2026-5006 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| CRITICAL GO-2026-5017 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| CRITICAL GO-2026-5019 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| CRITICAL GO-2026-5020 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| CRITICAL GO-2026-5021 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| CRITICAL GO-2026-5023 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| HIGH GO-2026-5013 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| HIGH GO-2026-5018 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| UNKNOWN GO-2026-5932 golang.org/x/crypto v0.47.0 /csi-snapshotter no fix pclntab | |
| MEDIUM GO-2026-5014 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| MEDIUM GO-2026-5015 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| MEDIUM GO-2026-5016 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| MEDIUM GO-2026-5033 golang.org/x/crypto v0.47.0 /csi-snapshotter 0.52.0 pclntab | |
| golang Go 1 components 14 findings | |
| os 0 components 0 findings | |
| 14 findings in 1 section(s): RULED OUT (14) | |
| vexscan report (image) for longhornio/csi-node-driver-registrar:v2.17.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. | |
| vexscan report (image) for longhornio/livenessprobe:v2.19.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. | |
| vexscan report (image) for longhornio/support-bundle-kit:v0.0.86 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 14 findings | |
| os 0 components 0 findings | |
| RULED OUT (14) - the vulnerable code is not present or cannot run | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| CRITICAL GO-2026-5006 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| CRITICAL GO-2026-5017 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| CRITICAL GO-2026-5019 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| CRITICAL GO-2026-5020 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| CRITICAL GO-2026-5021 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| CRITICAL GO-2026-5023 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| HIGH GO-2026-5013 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| HIGH GO-2026-5018 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| UNKNOWN GO-2026-5932 golang.org/x/crypto v0.49.0 …in/support-bundle-kit no fix pclntab | |
| MEDIUM GO-2026-5014 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| MEDIUM GO-2026-5015 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| MEDIUM GO-2026-5016 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| MEDIUM GO-2026-5033 golang.org/x/crypto v0.49.0 …in/support-bundle-kit 0.52.0 pclntab | |
| golang Go 1 components 14 findings | |
| os 0 components 0 findings | |
| 14 findings in 1 section(s): RULED OUT (14) | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment