Skip to content

Instantly share code, notes, and snippets.

@ihcsim

ihcsim/vexscan-report.txt

Created August 7, 2026 04:46
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ihcsim/ccfc53c496e78c59e0401fdaf0052ddb to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ihcsim/ccfc53c496e78c59e0401fdaf0052ddb to your computer and use it in GitHub Desktop.
Download ZIP
vexscan image report for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1, docker.io/rancher/hardened-kubernetes:v1.36.3-rke2r1-build20260723, docker.io/rancher/hardened-coredns:v1.14.6-build20260722, docker.io/rancher/hardened-cluster-autoscaler:v1.10.3-build20260717, docker.io/rancher/hardened-dns-node-cache:1.26.8-build20260722, docker.io/ra…
Raw
vexscan-report.txt
vexscan report (image) for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 2 findings
affected by severity: 1 unknown
1 affected: 1 with no fix yet
AFFECTED (1) - vulnerable code is present and can be loaded
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
vexscan report (image) for docker.io/rancher/hardened-kubernetes:v1.36.3-rke2r1-build20260723
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 5 findings
os 0 components 0 findings
RULED OUT (5) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
vexscan report (image) for docker.io/rancher/hardened-coredns:v1.14.6-build20260722
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
os 0 components 0 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
golang Go 1 components 1 findings
os 0 components 0 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-cluster-autoscaler:v1.10.3-build20260717
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/hardened-dns-node-cache:1.26.8-build20260722
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
os 0 components 0 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 pclntab
golang Go 1 components 1 findings
os 0 components 0 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-etcd:v3.6.14-k3s1-build20260723
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 pclntab
golang Go 1 components 1 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-k8s-metrics-server:v0.9.0-build20260722
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 pclntab
golang Go 1 components 1 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-addon-resizer:1.8.23-build20260717
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/klipper-helm:v0.13.3-build20260727
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 42 findings
os 0 components 0 findings
RULED OUT (42) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION FIXED IN BASIS
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 0.52.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 no fix pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 no fix pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 0.52.0 pclntab
golang Go 1 components 42 findings
os 0 components 0 findings
42 findings in 1 section(s): RULED OUT (42)
vexscan report (image) for docker.io/rancher/klipper-lb:v0.4.17
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/mirrored-pause:3.10.2
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s
No findings: nothing selected was found in this target,
or no matching advisories were published for it.
vexscan report (image) for docker.io/rancher/rke2-cloud-provider:v1.36.2-0.20260610225606-10b320a3ba51-build20260709
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 14 findings
RULED OUT (14) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION FIXED IN BASIS
CRITICAL GO-2026-5005 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5006 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5017 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5019 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5020 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5021 golang.org/x/crypto v0.51.0 0.52.0 pclntab
CRITICAL GO-2026-5023 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5013 golang.org/x/crypto v0.51.0 0.52.0 pclntab
HIGH GO-2026-5018 golang.org/x/crypto v0.51.0 0.52.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.51.0 no fix pclntab
MEDIUM GO-2026-5014 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5015 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5016 golang.org/x/crypto v0.51.0 0.52.0 pclntab
MEDIUM GO-2026-5033 golang.org/x/crypto v0.51.0 0.52.0 pclntab
golang Go 1 components 14 findings
14 findings in 1 section(s): RULED OUT (14)
vexscan report (image) for docker.io/rancher/hardened-snapshot-controller:v8.6.0-build20260722
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 pclntab
golang Go 1 components 1 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-traefik:v3.7.8-build20260717
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.52.0 pclntab
golang Go 1 components 1 findings
1 findings in 1 section(s): RULED OUT (1)
vexscan report (image) for docker.io/rancher/hardened-calico:v3.32.1-build20260722
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 5 findings
os 0 components 0 findings
RULED OUT (5) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
golang Go 1 components 5 findings
os 0 components 0 findings
5 findings in 1 section(s): RULED OUT (5)
vexscan report (image) for docker.io/rancher/hardened-flannel:v0.28.8-build20260722
scanned by: vexscan (devel) -- 2026-08-07 04:44 UTC, 1m39.9s -- advisories from https://api.osv.dev/v1
golang Go 1 components 1 findings
os 0 components 0 findings
RULED OUT (1) - the vulnerable code is not present or cannot run
SEVERITY ADVISORY PACKAGE VERSION BASIS
UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 pclntab
golang Go 1 components 1 findings
os 0 components 0 findings
1 findings in 1 section(s): RULED OUT (1)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment