registry.rancher.com/rancher/hardened-addon-resizer:1.8.23-build20260909

image scan · 1 finding

AFFECTED

present and loadable

ALREADY VEXED

somebody has answered

UNDETERMINED

needs a human

RULED OUT(1) — the vulnerable code is not present or cannot run

	Severity	Advisory	Package	Version	Location	Fixed in	Method
▸	UNKNOWN	GO-2026-5841	github.com/klauspost/compress	v1.17.9	/pod_nanny	1.18.7	pclntab
advisory GO-2026-5841 from golang fixed in 1.18.7 epss not scored — this advisory has no CVE id, and both feeds are keyed by CVE purl pkg:golang/github.com%2Fklauspost%2Fcompress@v1.17.9 binary /pod_nanny (stripped) packages github.com/klauspost/compress/s2 (package) vex vulnerable_code_not_present [pclntab]

Scan coverage#

Ecosystem	Components	Affected	Vexed	Undetermined	Ruled out	Status
`golang`	54	0	0	0	1	ok

Hub	Author	Indexes	Matched	Status
https://github.com/rancher/vexhub	Rancher Security team	1168	0	ok

Triage: scored 0, 0 known exploited, 1 with no CVE id to look up. Feeds as of EPSS 2026-09-14; KEV 2026.09.14.