Skip to content

Instantly share code, notes, and snippets.

@ihcsim

ihcsim/gomod-vex-report.json

Created August 3, 2026 05:37
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ihcsim/fa60d2aa04f8882018e499b494a428c0 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ihcsim/fa60d2aa04f8882018e499b494a428c0 to your computer and use it in GitHub Desktop.
Download ZIP
gomod-vex image report for longhornio/backing-image-manager:v1.12.0,longhornio/longhorn-engine:v1.12.0,longhornio/longhorn-instance-manager:v1.12.0,longhornio/longhorn-manager:v1.12.0,longhornio/longhorn-share-manager:v1.12.0,longhornio/longhorn-ui:v1.12.0,longhornio/longhorn-cli:v1.12.0,longhornio/csi-attacher:v4.12.0,longhornio/csi-provisioner…
Raw
gomod-vex-report.json
[
{
"target": "longhornio/backing-image-manager:v1.12.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "longhornio/longhorn-engine:v1.12.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "longhornio/longhorn-instance-manager:v1.12.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "longhornio/longhorn-manager:v1.12.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/sbin/longhorn-manager",
"module": "golang.org/x/crypto",
"version": "v0.50.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "longhornio/longhorn-share-manager:v1.12.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "longhornio/longhorn-ui:v1.12.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "longhornio/longhorn-cli:v1.12.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/longhornctl",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "linked"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/local/bin/longhornctl-local",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "longhornio/csi-attacher:v4.12.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-attacher",
"module": "golang.org/x/crypto",
"version": "v0.51.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "longhornio/csi-provisioner:v5.3.0-20260514",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "longhornio/csi-resizer:v2.1.0-20260514",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-resizer",
"module": "golang.org/x/crypto",
"version": "v0.46.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "longhornio/csi-snapshotter:v8.5.0-20260514",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/csi-snapshotter",
"module": "golang.org/x/crypto",
"version": "v0.47.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": false,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
},
{
"target": "longhornio/csi-node-driver-registrar:v2.17.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "longhornio/livenessprobe:v2.19.0",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": null
},
{
"target": "longhornio/support-bundle-kit:v0.0.86",
"mode": "image",
"module": "golang.org/x/crypto",
"findings": [
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5005",
"go_id": "GO-2026-5005",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5006",
"go_id": "GO-2026-5006",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5013",
"go_id": "GO-2026-5013",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5014",
"go_id": "GO-2026-5014",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5015",
"go_id": "GO-2026-5015",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5016",
"go_id": "GO-2026-5016",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5017",
"go_id": "GO-2026-5017",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5018",
"go_id": "GO-2026-5018",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5019",
"go_id": "GO-2026-5019",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5020",
"go_id": "GO-2026-5020",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5021",
"go_id": "GO-2026-5021",
"packages": [
"golang.org/x/crypto/ssh/knownhosts"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5023",
"go_id": "GO-2026-5023",
"packages": [
"golang.org/x/crypto/ssh"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5033",
"go_id": "GO-2026-5033",
"packages": [
"golang.org/x/crypto/ssh/agent"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
},
{
"binary": "/usr/bin/support-bundle-kit",
"module": "golang.org/x/crypto",
"version": "v0.49.0",
"cve": "GO-2026-5932",
"go_id": "GO-2026-5932",
"packages": [
"golang.org/x/crypto/openpgp",
"golang.org/x/crypto/openpgp/armor",
"golang.org/x/crypto/openpgp/clearsign",
"golang.org/x/crypto/openpgp/elgamal",
"golang.org/x/crypto/openpgp/errors",
"golang.org/x/crypto/openpgp/packet",
"golang.org/x/crypto/openpgp/s2k"
],
"granularity": "package",
"stripped": true,
"status": "not_present",
"method": "pclntab",
"justification": "vulnerable_code_not_present"
}
]
}
]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment