CVE-2025-13281
Fixed in a distro release EPSS <1%CVSS 5.8
A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).
Products: Kubernetes
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | k8s.io/kubernetes | 1.32.10 |
| Go | k8s.io/kubernetes | 1.33.6 |
| Go | k8s.io/kubernetes | 1.34.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | argo-cd-2.13 | no fix |
| Chainguard | argo-cd-2.13-compat | no fix |
| Chainguard | argo-cd-2.14 | no fix |
| Chainguard | argo-cd-2.14-compat | no fix |
| Chainguard | argo-cd-3.0 | 3.0.20-r8 |
| Chainguard | argo-cd-3.0-compat | 3.0.20-r8 |
| Chainguard | argo-cd-3.0-iamguarded-compat | 3.0.20-r8 |
| Chainguard | argo-cd-3.0-repo-server | 3.0.20-r8 |
| Chainguard | argo-cd-3.1 | 3.1.9-r7 |
| Chainguard | argo-cd-3.1-compat | 3.1.9-r7 |
| Chainguard | argo-cd-3.1-iamguarded-compat | 3.1.9-r7 |
| Chainguard | argo-cd-3.1-repo-server | 3.1.9-r7 |
| Chainguard | argo-cd-3.2 | 3.2.1-r4 |
| Chainguard | argo-cd-3.2 | 3.2.2-r0 |
| Chainguard | argo-cd-3.2-compat | 3.2.1-r4 |
| Chainguard | argo-cd-3.2-iamguarded-compat | 3.2.1-r4 |
| Chainguard | argo-cd-3.2-repo-server | 3.2.1-r4 |
| Chainguard | argo-cd-fips-2.14 | no fix |
| Chainguard | argo-cd-fips-2.14-compat | no fix |
| Chainguard | argo-cd-fips-3.0 | 3.0.20-r9 |
| Chainguard | argo-cd-fips-3.0-compat | 3.0.20-r9 |
| Chainguard | argo-cd-fips-3.1 | 3.1.9-r9 |
| Chainguard | argo-cd-fips-3.1 | 3.1.9-r10 |
| Chainguard | argo-cd-fips-3.1-compat | 3.1.9-r9 |
| Chainguard | argo-cd-fips-3.1-iamguarded-compat | 3.1.9-r9 |
| Chainguard | argo-cd-fips-3.1-repo-server | 3.1.9-r9 |
| Chainguard | argo-cd-fips-3.2-compat | 3.2.1-r3 |
| Chainguard | argo-rollouts | 1.10.0-r0 |
| Chainguard | argo-rollouts-fips | 1.10.0-r0 |
| Chainguard | argocd-image-updater | 1.0.2-r1 |
| Chainguard | argocd-image-updater-compat | 1.0.2-r1 |
| Chainguard | argocd-image-updater-fips | 1.0.2-r1 |
| Chainguard | aws-efs-csi-driver | 2.2.0-r1 |
| Chainguard | aws-efs-csi-driver-fips | 2.2.0-r1 |
| Chainguard | azuredisk-csi-1.28 | no fix |
| Chainguard | azuredisk-csi-1.29 | no fix |
| Chainguard | azuredisk-csi-1.30 | no fix |
| Chainguard | azuredisk-csi-1.31 | no fix |
| Chainguard | azuredisk-csi-1.32 | 1.32.11-r6 |
| Chainguard | azuredisk-csi-1.33 | 1.33.7-r2 |
| Chainguard | azuredisk-csi-1.33-compat | 1.33.7-r2 |
| Chainguard | azuredisk-csi-fips-1.28 | no fix |
| Chainguard | azuredisk-csi-fips-1.29 | no fix |
| Chainguard | azuredisk-csi-fips-1.30 | no fix |
| Chainguard | azuredisk-csi-fips-1.31 | no fix |
| Chainguard | azuredisk-csi-fips-1.32 | 1.32.11-r6 |
| Chainguard | azuredisk-csi-fips-1.33 | 1.33.7-r2 |
| Chainguard | azurefile-csi-1.29 | no fix |
| Chainguard | azurefile-csi-1.30 | no fix |
| Chainguard | azurefile-csi-1.31 | no fix |
| Chainguard | azurefile-csi-1.32 | 1.32.8-r3 |
| Chainguard | azurefile-csi-1.33 | 1.33.6-r4 |
| Chainguard | azurefile-csi-1.33-compat | 1.33.6-r4 |
| Chainguard | azurefile-csi-1.34 | 1.34.2-r2 |
| Chainguard | azurefile-csi-1.34-compat | 1.34.2-r2 |
| Chainguard | azurefile-csi-fips-1.29 | no fix |
| Chainguard | azurefile-csi-fips-1.30 | no fix |
| Chainguard | azurefile-csi-fips-1.31 | no fix |
| Chainguard | azurefile-csi-fips-1.32 | 1.32.8-r3 |
| Chainguard | azurefile-csi-fips-1.33 | 1.33.6-r3 |
| Chainguard | azurefile-csi-fips-1.34 | 1.34.2-r2 |
| Chainguard | azurefile-csi-fips-1.34-compat | 1.34.2-r2 |
| Chainguard | blob-csi-1.23 | 1.23.11-r61 |
| Chainguard | blob-csi-1.23-compat | 1.23.11-r61 |
| Chainguard | blob-csi-1.24 | 1.24.11-r10 |
| Chainguard | blob-csi-1.24-compat | 1.24.11-r10 |
| Chainguard | blob-csi-1.25 | 1.25.10-r6 |
| Chainguard | blob-csi-1.25-compat | 1.25.10-r6 |
| Chainguard | blob-csi-1.26 | 1.26.7-r9 |
| Chainguard | blob-csi-1.26-compat | 1.26.7-r9 |
| Chainguard | blob-csi-1.27 | 1.27.0-r5 |
| Chainguard | blob-csi-fips-1.23 | 1.23.11-r62 |
| Chainguard | blob-csi-fips-1.23-compat | 1.23.11-r62 |
| Chainguard | blob-csi-fips-1.24 | 1.24.11-r10 |
| Chainguard | blob-csi-fips-1.24-compat | 1.24.11-r10 |
| Chainguard | blob-csi-fips-1.25 | 1.25.10-r5 |
| Chainguard | blob-csi-fips-1.25-compat | 1.25.10-r5 |
| Chainguard | blob-csi-fips-1.26 | 1.26.7-r8 |
| Chainguard | blob-csi-fips-1.26-compat | 1.26.7-r8 |
| Chainguard | blob-csi-fips-1.27 | 1.27.0-r4 |
| Chainguard | blob-csi-fips-1.27-compat | 1.27.0-r4 |
| Chainguard | calico-3.31 | 3.31.3-r0 |
| Chainguard | calico-apiserver-3.29 | no fix |
| Chainguard | calico-apiserver-3.30 | 3.30.5-r4 |
| Chainguard | calico-apiserver-3.31 | 3.31.3-r0 |
| Chainguard | calico-apiserver-compat-3.31 | 3.31.3-r0 |
| Chainguard | calico-apiserver-fips-3.29 | no fix |
| Chainguard | calico-app-policy-3.30 | 3.30.5-r4 |
| Chainguard | calico-app-policy-3.31 | 3.31.3-r0 |
| Chainguard | calico-app-policy-fips-3.30 | 3.30.5-r4 |
| Chainguard | calico-app-policy-fips-3.31 | 3.31.2-r5 |
| Chainguard | calico-cni-3.31 | 3.31.3-r0 |
| Chainguard | calico-cni-compat-3.31 | 3.31.3-r0 |
| Chainguard | calico-felix-3.29 | no fix |
| Chainguard | calico-felix-3.31 | 3.31.3-r0 |
| Chainguard | calico-felix-fips-3.29 | no fix |
| Chainguard | calico-goldmane-3.30 | 3.30.5-r4 |
| Chainguard | calico-goldmane-3.31 | 3.31.3-r0 |
| Chainguard | calico-goldmane-fips-3.31 | 3.31.2-r5 |
| Chainguard | calico-key-cert-provisioner-3.31 | 3.31.3-r0 |
| Chainguard | calico-kube-controllers-3.31 | 3.31.3-r0 |
| Chainguard | calico-node-3.29 | no fix |
| Chainguard | calico-node-3.31 | 3.31.3-r0 |
| Chainguard | calico-node-fips-3.29 | no fix |
| Chainguard | calico-pod2daemon-3.31 | 3.31.3-r0 |
| Chainguard | calico-pod2daemon-flexvol-compat-3.31 | 3.31.3-r0 |
| Chainguard | calico-typha-client-3.31 | 3.31.3-r0 |
| Chainguard | calico-typhad-3.31 | 3.31.3-r0 |
| Chainguard | calico-whisker-3.31 | 3.31.3-r0 |
| Chainguard | calico-whisker-backend-3.30 | 3.30.5-r4 |
| Chainguard | calico-whisker-backend-3.31 | 3.31.3-r0 |
| Chainguard | calicoctl-3.31 | 3.31.3-r0 |
| Chainguard | cephcsi | 3.15.1-r3 |
| Chainguard | cephcsi-fips | 3.15.1-r3 |
| Chainguard | cluster-autoscaler-1.31 | no fix |
| Chainguard | cluster-autoscaler-fips-1.31 | no fix |
| Chainguard | docker-machine-driver-harvester | 1.0.6-r4 |
| Chainguard | eks-distro-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-coredns-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-coredns-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-coredns-fips-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-coredns-fips-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-fips-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-fips-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-kube-apiserver-1.29 | no fix |
| Chainguard | eks-distro-kube-apiserver-1.30 | no fix |
| Chainguard | eks-distro-kube-apiserver-1.31 | no fix |
| Chainguard | eks-distro-kube-apiserver-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-kube-apiserver-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-kube-apiserver-fips-1.29 | no fix |
| Chainguard | eks-distro-kube-apiserver-fips-1.30 | no fix |
| Chainguard | eks-distro-kube-apiserver-fips-1.31 | no fix |
| Chainguard | eks-distro-kube-apiserver-fips-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-kube-apiserver-fips-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-kube-controller-manager-1.29 | no fix |
| Chainguard | eks-distro-kube-controller-manager-1.30 | no fix |
| Chainguard | eks-distro-kube-controller-manager-1.31 | no fix |
| Chainguard | eks-distro-kube-controller-manager-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-kube-controller-manager-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-kube-controller-manager-fips-1.29 | no fix |
| Chainguard | eks-distro-kube-controller-manager-fips-1.30 | no fix |
| Chainguard | eks-distro-kube-controller-manager-fips-1.31 | no fix |
| Chainguard | eks-distro-kube-controller-manager-fips-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-kube-controller-manager-fips-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-kube-proxy-1.29 | no fix |
| Chainguard | eks-distro-kube-proxy-1.30 | no fix |
| Chainguard | eks-distro-kube-proxy-1.31 | no fix |
| Chainguard | eks-distro-kube-proxy-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-kube-proxy-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-kube-proxy-fips-1.29 | no fix |
| Chainguard | eks-distro-kube-proxy-fips-1.30 | no fix |
| Chainguard | eks-distro-kube-proxy-fips-1.31 | no fix |
| Chainguard | eks-distro-kube-proxy-fips-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-kube-proxy-fips-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-kube-scheduler-1.29 | no fix |
| Chainguard | eks-distro-kube-scheduler-1.30 | no fix |
| Chainguard | eks-distro-kube-scheduler-1.31 | no fix |
| Chainguard | eks-distro-kube-scheduler-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-kube-scheduler-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-kube-scheduler-fips-1.29 | no fix |
| Chainguard | eks-distro-kube-scheduler-fips-1.30 | no fix |
| Chainguard | eks-distro-kube-scheduler-fips-1.31 | no fix |
| Chainguard | eks-distro-kube-scheduler-fips-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-kube-scheduler-fips-1.33 | 1.33.21-r0 |
| Chainguard | eks-distro-kubernetes-pause-1.32 | 1.32.31-r0 |
| Chainguard | eks-distro-kubernetes-pause-1.33 | 1.33.21-r0 |
| Chainguard | emissary | 3.10.0-r15 |
| Chainguard | emissary-apiext | 3.10.0-r15 |
| Chainguard | emissary-oci-entrypoint | 3.10.0-r15 |
| Chainguard | ip-masq-agent | 2.12.0-r16 |
| Chainguard | kapp | 0.65.0-r2 |
| Chainguard | kapp-fips | 0.65.0-r2 |
| Chainguard | kots | 1.129.1-r2 |
| Chainguard | kube-apiserver-1.31 | no fix |
| Chainguard | kube-apiserver-1.32 | 1.32.11-r0 |
| Chainguard | kube-apiserver-1.32-default | 1.32.11-r0 |
| Chainguard | kube-apiserver-1.32-default-compat | 1.32.11-r0 |
| Chainguard | kube-apiserver-fips-1.31 | no fix |
| Chainguard | kube-conformance-1.31 | no fix |
| Chainguard | kube-controller-manager-1.31 | no fix |
| Chainguard | kube-controller-manager-1.32 | 1.32.11-r0 |
| Chainguard | kube-controller-manager-1.32-default | 1.32.11-r0 |
| Chainguard | kube-controller-manager-1.32-default-compat | 1.32.11-r0 |
| Chainguard | kube-controller-manager-fips-1.31 | no fix |
| Chainguard | kube-proxy-1.31 | no fix |
| Chainguard | kube-proxy-1.32 | 1.32.11-r0 |
| Chainguard | kube-proxy-1.32-default | 1.32.11-r0 |
| Chainguard | kube-proxy-1.32-default-compat | 1.32.11-r0 |
| Chainguard | kube-proxy-fips-1.31 | no fix |
| Chainguard | kube-scheduler-1.31 | no fix |
| Chainguard | kube-scheduler-1.32 | 1.32.11-r0 |
| Chainguard | kube-scheduler-1.32-default | 1.32.11-r0 |
| Chainguard | kube-scheduler-1.32-default-compat | 1.32.11-r0 |
| Chainguard | kube-scheduler-fips-1.31 | no fix |
| Chainguard | kubeadm-1.31 | no fix |
| Chainguard | kubeadm-1.32 | 1.32.11-r0 |
| Chainguard | kubeadm-1.32-default | 1.32.11-r0 |
| Chainguard | kubeadm-1.32-default-compat | 1.32.11-r0 |
| Chainguard | kubeadm-fips-1.31 | no fix |
| Chainguard | kubectl-1.30 | no fix |
| Chainguard | kubectl-1.31 | no fix |
| Chainguard | kubectl-1.32 | 1.32.11-r0 |
| Chainguard | kubectl-1.32-default | 1.32.11-r0 |
| Chainguard | kubectl-1.32-default-compat | 1.32.11-r0 |
| Chainguard | kubectl-1.32-iamguarded-compat | 1.32.11-r0 |
| Chainguard | kubectl-argo-rollouts | 1.10.0-r0 |
| Chainguard | kubectl-argo-rollouts-fips | 1.10.0-r0 |
| Chainguard | kubectl-bash-completion-1.32 | 1.32.11-r0 |
| Chainguard | kubectl-fips-1.31 | no fix |
| Chainguard | kubelet-1.31 | no fix |
| Chainguard | kubelet-1.32 | 1.32.11-r0 |
| Chainguard | kubelet-1.32-default | 1.32.11-r0 |
| Chainguard | kubelet-1.32-default-compat | 1.32.11-r0 |
| Chainguard | kubelet-fips-1.31 | no fix |
| Chainguard | kubernetes-1.30 | no fix |
| Chainguard | kubernetes-1.31 | no fix |
| Chainguard | kubernetes-1.32 | 1.32.11-r0 |
| Chainguard | kubernetes-1.32-default | 1.32.11-r0 |
| Chainguard | kubernetes-csi-driver-hostpath | 1.17.0-r8 |
| Chainguard | kubernetes-csi-driver-nfs | 4.13.0-r0 |
| Chainguard | kubernetes-csi-driver-nfs-fips | 4.13.0-r0 |
| Chainguard | kubernetes-dns-node-cache | 1.26.7-r4 |
| Chainguard | kubernetes-dns-node-cache-fips | 1.26.7-r5 |
| Chainguard | kubernetes-fips-1.31 | no fix |
| Chainguard | kubernetes-pause-1.32 | 1.32.11-r0 |
| Chainguard | kubernetes-pause-compat-1.32 | 1.32.11-r0 |
| Chainguard | local-static-provisioner | 2.9.0-r0 |
| Chainguard | local-static-provisioner-fips | 2.9.0-r0 |
| Chainguard | local-volume-node-cleanup | 2.9.0-r0 |
| Chainguard | local-volume-node-cleanup-compat | 2.9.0-r4 |
| Chainguard | local-volume-node-cleanup-fips | 2.9.0-r0 |
| Chainguard | longhorn-manager-1.10 | 1.10.1-r5 |
| Chainguard | longhorn-manager-1.10-compat | 1.10.1-r5 |
| Chainguard | longhorn-manager-1.8 | 1.8.2-r5 |
| Chainguard | longhorn-manager-1.8-compat | 1.8.2-r5 |
| Chainguard | longhorn-manager-1.9 | 1.9.2-r6 |
| Chainguard | longhorn-manager-1.9-compat | 1.9.2-r6 |
| Chainguard | longhorn-manager-fips-1.10 | 1.10.1-r5 |
| Chainguard | longhorn-manager-fips-1.8 | 1.8.2-r5 |
| Chainguard | longhorn-manager-fips-1.9 | 1.9.3-r1 |
| Chainguard | longhorn-manager-fips-1.9 | 1.9.2-r7 |
| Chainguard | longhorn-manager-fips-1.9 | 1.9.2-r6 |
| Chainguard | longhorn-manager-fips-1.9-compat | 1.9.2-r6 |
| Chainguard | longhorn-manager-fips-1.9-compat | 1.9.3-r1 |
| Chainguard | longhorn-manager-fips-1.9-compat | 1.9.2-r7 |
| Chainguard | longhorn-share-manager-1.10 | 1.10.1-r2 |
| Chainguard | longhorn-share-manager-1.10-compat | 1.10.1-r2 |
| Chainguard | longhorn-share-manager-1.8 | 1.8.2-r7 |
| Chainguard | longhorn-share-manager-1.8-compat | 1.8.2-r7 |
| Chainguard | longhorn-share-manager-1.9 | 1.9.2-r4 |
| Chainguard | longhorn-share-manager-1.9-compat | 1.9.2-r4 |
| Chainguard | longhorn-share-manager-fips-1.10 | 1.10.1-r2 |
| Chainguard | longhorn-share-manager-fips-1.10-compat | 1.10.1-r2 |
| Chainguard | longhorn-share-manager-fips-1.8 | 1.8.2-r7 |
| Chainguard | longhorn-share-manager-fips-1.9 | 1.9.2-r4 |
| Chainguard | longhorn-share-manager-fips-1.9-compat | 1.9.2-r4 |
| Chainguard | mesosphere-vsphere-csi | 3.5.0-r6 |
| Chainguard | mesosphere-vsphere-csi-driver | 3.5.0-r6 |
| Chainguard | mesosphere-vsphere-csi-driver-fips | 0 |
| Chainguard | mesosphere-vsphere-csi-syncer | 3.5.0-r6 |
| Chainguard | mesosphere-vsphere-csi-syncer-fips | 0 |
| Chainguard | node-feature-discovery-0.16 | no fix |
| Chainguard | node-feature-discovery-0.17 | 0.17.4-r5 |
| Chainguard | node-feature-discovery-0.18 | 0.18.3-r4 |
| Chainguard | node-feature-discovery-fips-0.16-gc | no fix |
| Chainguard | node-feature-discovery-fips-0.16-kubectl-nfd | no fix |
| Chainguard | node-feature-discovery-fips-0.16-master | no fix |
| Chainguard | node-feature-discovery-fips-0.16-topology-updater | no fix |
| Chainguard | node-feature-discovery-fips-0.16-worker | no fix |
| Chainguard | node-feature-discovery-fips-0.17-master | 0.17.4-r5 |
| Chainguard | node-feature-discovery-fips-0.17-topology-updater | 0.17.4-r5 |
| Chainguard | node-feature-discovery-fips-0.18-worker | 0.18.3-r4 |
| Chainguard | nodetaint | 0.0.5-r0 |
| Chainguard | py3.10-ambassador | 3.10.0-r15 |
| Chainguard | py3.12-ambassador | 3.10.0-r15 |
| Chainguard | rancher-2.10 | no fix |
| Chainguard | rancher-2.11 | 2.11.8-r3 |
| Chainguard | rancher-2.12 | 2.12.4-r4 |
| Chainguard | rancher-2.13 | 2.13.0-r1 |
| Chainguard | rancher-agent-2.10 | no fix |
| Chainguard | rancher-agent-2.11 | 2.11.8-r2 |
| Chainguard | rancher-agent-2.12 | 2.12.4-r3 |
| Chainguard | rancher-agent-2.13 | 2.13.0-r2 |
| Chainguard | rancher-agent-2.9 | no fix |
| Chainguard | rancher-support-bundle-kit | 0.0.76-r0 |
| Chainguard | rancher-system-agent | 0.3.14-r3 |
| Chainguard | rancher-webhook-0.4 | no fix |
| Chainguard | rancher-webhook-0.5 | 0.5.12-r11 |
| Chainguard | rancher-webhook-0.5 | 0.5.12-r3 |
| Chainguard | rancher-webhook-0.6 | no fix |
| Chainguard | rancher-webhook-fips-0.4 | no fix |
| Chainguard | rancher-webhook-fips-0.5 | no fix |
| Chainguard | rancher-webhook-fips-0.6 | no fix |
| Chainguard | rke2-runtime-fips-kube-apiserver-1.31 | no fix |
| Chainguard | rke2-runtime-fips-kube-controller-manager-1.31 | no fix |
| Chainguard | rke2-runtime-fips-kube-proxy-1.31 | no fix |
| Chainguard | rke2-runtime-fips-kube-scheduler-1.31 | no fix |
| Chainguard | rke2-runtime-fips-kubectl-1.31 | no fix |
| Chainguard | rke2-runtime-fips-kubelet-1.31 | no fix |
| Chainguard | vc-controller-manager | 1.13.0-r7 |
| Chainguard | vc-controller-manager-fips | 1.13.0-r8 |
| Chainguard | vc-scheduler | 1.13.0-r7 |
| Chainguard | vcluster | 0.30.3-r1 |
| Chainguard | vcluster-syncer | 0.30.3-r1 |
| Chainguard | yunikorn-k8shim | 1.7.0-r7 |
| Chainguard | yunikorn-k8shim-fips | 1.7.0-r7 |
| Debian 12 | kubernetes | 1.20.5+really1.20.2-1 |
| Debian 13 | kubernetes | 1.20.5+really1.20.2-1 |
| Debian 14 | kubernetes | 1.20.5+really1.20.2-1 |
| Wolfi | argo-cd-3.2 | 3.2.2-r0 |
| Wolfi | argo-cd-3.2 | 3.2.1-r4 |
| Wolfi | argo-cd-3.2-compat | 3.2.1-r4 |
| Wolfi | argo-cd-3.2-iamguarded-compat | 3.2.1-r4 |
| Wolfi | argo-cd-3.2-repo-server | 3.2.1-r4 |
| Wolfi | argo-rollouts | 1.10.0-r0 |
| Wolfi | argocd-image-updater | 1.0.2-r1 |
| Wolfi | argocd-image-updater-compat | 1.0.2-r1 |
| Wolfi | aws-efs-csi-driver | 2.2.0-r1 |
| Wolfi | blob-csi-1.27 | 1.27.0-r5 |
| Wolfi | calico-3.31 | 3.31.3-r0 |
| Wolfi | calico-apiserver-3.31 | 3.31.3-r0 |
| Wolfi | calico-apiserver-compat-3.31 | 3.31.3-r0 |
| Wolfi | calico-app-policy-3.31 | 3.31.3-r0 |
| Wolfi | calico-cni-3.31 | 3.31.3-r0 |
| Wolfi | calico-cni-compat-3.31 | 3.31.3-r0 |
| Wolfi | calico-felix-3.31 | 3.31.3-r0 |
| Wolfi | calico-goldmane-3.31 | 3.31.3-r0 |
| Wolfi | calico-key-cert-provisioner-3.31 | 3.31.3-r0 |
| Wolfi | calico-kube-controllers-3.31 | 3.31.3-r0 |
| Wolfi | calico-node-3.31 | 3.31.3-r0 |
| Wolfi | calico-pod2daemon-3.31 | 3.31.3-r0 |
| Wolfi | calico-pod2daemon-flexvol-compat-3.31 | 3.31.3-r0 |
| Wolfi | calico-typha-client-3.31 | 3.31.3-r0 |
| Wolfi | calico-typhad-3.31 | 3.31.3-r0 |
| Wolfi | calico-whisker-3.31 | 3.31.3-r0 |
| Wolfi | calico-whisker-backend-3.31 | 3.31.3-r0 |
| Wolfi | calicoctl-3.31 | 3.31.3-r0 |
| Wolfi | docker-machine-driver-harvester | 1.0.6-r4 |
| Wolfi | emissary | 3.10.0-r15 |
| Wolfi | emissary-apiext | 3.10.0-r15 |
| Wolfi | emissary-oci-entrypoint | 3.10.0-r15 |
| Wolfi | ip-masq-agent | 2.12.0-r16 |
| Wolfi | kapp | 0.65.0-r2 |
| Wolfi | kots | 1.129.1-r2 |
| Wolfi | kubectl-1.30 | no fix |
| Wolfi | kubectl-1.31 | no fix |
| Wolfi | kubectl-1.32 | 1.32.11-r0 |
| Wolfi | kubectl-1.32-default | 1.32.11-r0 |
| Wolfi | kubectl-argo-rollouts | 1.10.0-r0 |
| Wolfi | kubernetes-csi-driver-hostpath | 1.17.0-r8 |
| Wolfi | kubernetes-csi-driver-nfs | 4.13.0-r0 |
| Wolfi | kubernetes-dns-node-cache | 1.26.7-r4 |
| Wolfi | local-static-provisioner | 2.9.0-r0 |
| Wolfi | local-volume-node-cleanup | 2.9.0-r0 |
| Wolfi | local-volume-node-cleanup-compat | 2.9.0-r4 |
| Wolfi | mesosphere-vsphere-csi | 3.5.0-r6 |
| Wolfi | mesosphere-vsphere-csi-driver | 3.5.0-r6 |
| Wolfi | mesosphere-vsphere-csi-syncer | 3.5.0-r6 |
| Wolfi | node-feature-discovery-0.18 | 0.18.3-r4 |
| Wolfi | nodetaint | 0.0.5-r0 |
| Wolfi | py3.10-ambassador | 3.10.0-r15 |
| Wolfi | py3.12-ambassador | 3.10.0-r15 |
| Wolfi | rancher-2.13 | 2.13.0-r1 |
| Wolfi | rancher-agent-2.13 | 2.13.0-r2 |
| Wolfi | rancher-system-agent | 0.3.14-r3 |
| Wolfi | rancher-webhook-0.6 | no fix |
| Wolfi | vcluster | 0.30.3-r1 |
| Wolfi | vcluster-syncer | 0.30.3-r1 |
| Wolfi | yunikorn-k8shim | 1.7.0-r7 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20251230T014957-150000.1.134.1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 |