registry.rancher.com/rancher/hardened-cloud-provider-vsphere:v1.37.0-build20260909

image scan · 1 finding

AFFECTED

present and loadable

ALREADY VEXED

somebody has answered

UNDETERMINED

needs a human

RULED OUT(1) — the vulnerable code is not present or cannot run

	Severity	Advisory	Package	Version	Location	Method
▸	UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.56.0	/vsphere-cloud-controller-manager	pclntab
advisory GO-2026-5932 from golang epss not scored — this advisory has no CVE id, and both feeds are keyed by CVE purl pkg:golang/golang.org%2Fx%2Fcrypto@v0.56.0 binary /vsphere-cloud-controller-manager packages golang.org/x/crypto/openpgp, golang.org/x/crypto/openpgp/armor, golang.org/x/crypto/openpgp/clearsign, golang.org/x/crypto/openpgp/elgamal, golang.org/x/crypto/openpgp/errors, golang.org/x/crypto/openpgp/packet, golang.org/x/crypto/openpgp/s2k (package) vex vulnerable_code_not_present [pclntab]

Scan coverage#

Ecosystem	Components	Affected	Vexed	Undetermined	Ruled out	Status
`golang`	120	0	0	0	1	ok
`os`	8	0	0	0	0	ok

Hub	Author	Indexes	Matched	Status
https://github.com/rancher/vexhub	Rancher Security team	1168	0	ok

Triage: scored 0, 0 known exploited, 1 with no CVE id to look up. Feeds as of EPSS 2026-09-14; KEV 2026.09.14.