Ivan Sim ihcsim
ihcsim
/ vexscan-report.txt
Created
August 10, 2026 18:13
vexscan image report for longhornio/backing-image-manager:v1.12.0, longhornio/longhorn-engine:v1.12.0, longhornio/longhorn-instance-manager:v1.12.0, longhornio/longhorn-manager:v1.12.0, longhornio/longhorn-share-manager:v1.12.0, longhornio/longhorn-ui:v1.12.0, longhornio/longhorn-cli:v1.12.0, longhornio/csi-attacher:v4.12.0, longhornio/csi-provi…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vexscan report (image) for longhornio/backing-image-manager:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. | |
| vexscan report (image) for longhornio/longhorn-engine:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:09 UTC, 3m42.7s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. |
ihcsim
/ vexscan-report.txt
Created
August 10, 2026 18:05
vexscan image report for docker.io/rancher/klipper-helm:v0.11.1-build20260615, docker.io/rancher/klipper-lb:v0.4.17, docker.io/rancher/local-path-provisioner:v0.0.36, docker.io/rancher/mirrored-coredns-coredns:1.14.4, docker.io/rancher/mirrored-library-busybox:1.37.0, docker.io/rancher/mirrored-library-traefik:3.7.4, docker.io/rancher/mirrored-m…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vexscan report (image) for docker.io/rancher/klipper-helm:v0.11.1-build20260615 | |
| scanned by: vexscan (devel) -- 2026-08-10 18:04 UTC, 56.8s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 42 findings | |
| os 0 components 0 findings | |
| RULED OUT (42) - the vulnerable code is not present or cannot run | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab |
ihcsim
/ vexscan-report.txt
Last active
August 10, 2026 18:01
vexscan image report for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1, docker.io/rancher/hardened-kubernetes:v1.36.3-rke2r1-build20260723, docker.io/rancher/hardened-coredns:v1.14.6-build20260722, docker.io/rancher/hardened-cluster-autoscaler:v1.10.3-build20260717, docker.io/rancher/hardened-dns-node-cache:1.26.8-build20260722, docker.io/ra…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vexscan report (image) for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1 | |
| scanned by: vexscan (devel) -- 2026-08-10 17:59 UTC, 1m52.9s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 2 findings | |
| affected by severity: 1 unknown | |
| 1 affected: 1 with no fix yet | |
| AFFECTED (1) - vulnerable code is present and can be loaded | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS | |
| UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /bin/containerd |
ihcsim
/ vexscan-report.txt
Created
August 10, 2026 15:36
vexscan image report for docker.io/rancher/klipper-helm:v0.11.1-build20260615, docker.io/rancher/klipper-lb:v0.4.17, docker.io/rancher/local-path-provisioner:v0.0.36, docker.io/rancher/mirrored-coredns-coredns:1.14.4, docker.io/rancher/mirrored-library-busybox:1.37.0, docker.io/rancher/mirrored-library-traefik:3.7.4, docker.io/rancher/mirrored-m…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vexscan report (image) for docker.io/rancher/klipper-helm:v0.11.1-build20260615 | |
| scanned by: vexscan (devel) -- 2026-08-10 15:35 UTC, 56.4s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 42 findings | |
| os 0 components 0 findings | |
| RULED OUT (42) - the vulnerable code is not present or cannot run | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION FIXED IN BASIS | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 …eapis/bin/mapkubeapis 0.52.0 pclntab | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 …tatus/helm-set-status 0.52.0 pclntab |
ihcsim
/ vexscan-report.txt
Created
August 10, 2026 15:35
vexscan image report for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1, docker.io/rancher/hardened-kubernetes:v1.36.3-rke2r1-build20260723, docker.io/rancher/hardened-coredns:v1.14.6-build20260722, docker.io/rancher/hardened-cluster-autoscaler:v1.10.3-build20260717, docker.io/rancher/hardened-dns-node-cache:1.26.8-build20260722, docker.io/ra…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vexscan report (image) for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1 | |
| scanned by: vexscan (devel) -- 2026-08-10 15:33 UTC, 2m8.9s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 2 findings | |
| affected by severity: 1 unknown | |
| 1 affected: 1 with no fix yet | |
| AFFECTED (1) - vulnerable code is present and can be loaded | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS | |
| UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /bin/containerd |
ihcsim
/ vexscan-report.sarif
Created
August 7, 2026 17:57
vexscan image report for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1, docker.io/rancher/hardened-kubernetes:v1.36.3-rke2r1-build20260723, docker.io/rancher/hardened-coredns:v1.14.6-build20260722, docker.io/rancher/hardened-cluster-autoscaler:v1.10.3-build20260717, docker.io/rancher/hardened-dns-node-cache:1.26.8-build20260722, docker.io/ra…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [ | |
| { | |
| "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", | |
| "version": "2.1.0", | |
| "runs": [ | |
| { | |
| "tool": { | |
| "driver": { | |
| "name": "vexscan", | |
| "version": "(devel)", |
ihcsim
/ vexscan-report.txt
Created
August 7, 2026 17:48
vexscan image report for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1, docker.io/rancher/hardened-kubernetes:v1.36.3-rke2r1-build20260723, docker.io/rancher/hardened-coredns:v1.14.6-build20260722, docker.io/rancher/hardened-cluster-autoscaler:v1.10.3-build20260717, docker.io/rancher/hardened-dns-node-cache:1.26.8-build20260722, docker.io/ra…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vexscan report (image) for docker.io/rancher/rke2-runtime:v1.36.3-rc5-rke2r1 | |
| scanned by: vexscan (devel) -- 2026-08-07 17:46 UTC, 1m59.5s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 2 findings | |
| affected by severity: 1 unknown | |
| 1 affected: 1 with no fix yet | |
| AFFECTED (1) - vulnerable code is present and can be loaded | |
| SEVERITY ADVISORY PACKAGE VERSION LOCATION BASIS | |
| UNKNOWN GO-2026-5932 golang.org/x/crypto v0.53.0 /bin/containerd |
ihcsim
/ vexscan-report.txt
Created
August 7, 2026 05:15
vexscan image report for rancher/rancher:latest, rancher/rancher:head
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vexscan report (image) for rancher/rancher:latest | |
| scanned by: vexscan (devel) -- 2026-08-07 05:12 UTC, 2m2.9s -- advisories from https://api.osv.dev/v1 | |
| golang Go 6 components 118 findings | |
| os 0 components 0 findings | |
| affected by severity: 12 critical, 6 high, 2 unknown, 11 medium | |
| 31 affected: 11 unique advisories, 29 fixable, 2 with no fix yet | |
| AFFECTED (31) - vulnerable code is present and can be loaded | |
| SEVERITY ADVISORY PACKAGE VERSION FIXED IN BASIS |
ihcsim
/ vexscan-report.txt
Created
August 7, 2026 05:14
vexscan image report for longhornio/backing-image-manager:v1.12.0, longhornio/longhorn-engine:v1.12.0, longhornio/longhorn-instance-manager:v1.12.0, longhornio/longhorn-manager:v1.12.0, longhornio/longhorn-share-manager:v1.12.0, longhornio/longhorn-ui:v1.12.0, longhornio/longhorn-cli:v1.12.0, longhornio/csi-attacher:v4.12.0, longhornio/csi-provi…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vexscan report (image) for longhornio/backing-image-manager:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-07 05:11 UTC, 3m24.6s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. | |
| vexscan report (image) for longhornio/longhorn-engine:v1.12.0 | |
| scanned by: vexscan (devel) -- 2026-08-07 05:11 UTC, 3m24.6s | |
| No findings: nothing selected was found in this target, | |
| or no matching advisories were published for it. |
ihcsim
/ vexscan-report.txt
Created
August 7, 2026 04:48
vexscan image report for docker.io/rancher/klipper-helm:v0.11.1-build20260615, docker.io/rancher/klipper-lb:v0.4.17, docker.io/rancher/local-path-provisioner:v0.0.36, docker.io/rancher/mirrored-coredns-coredns:1.14.4, docker.io/rancher/mirrored-library-busybox:1.37.0, docker.io/rancher/mirrored-library-traefik:3.7.4, docker.io/rancher/mirrored-m…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| vexscan report (image) for docker.io/rancher/klipper-helm:v0.11.1-build20260615 | |
| scanned by: vexscan (devel) -- 2026-08-07 04:47 UTC, 51.4s -- advisories from https://api.osv.dev/v1 | |
| golang Go 1 components 42 findings | |
| os 0 components 0 findings | |
| RULED OUT (42) - the vulnerable code is not present or cannot run | |
| SEVERITY ADVISORY PACKAGE VERSION FIXED IN BASIS | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 0.52.0 pclntab | |
| CRITICAL GO-2026-5005 golang.org/x/crypto v0.47.0 0.52.0 pclntab |
NewerOlder