registry.rancher.com/rancher/hardened-csi-node-driver-registrar:v2.13.0-build20260909

image scan · 1 finding

AFFECTED

present and loadable

ALREADY VEXED

somebody has answered

UNDETERMINED

needs a human

RULED OUT(1) — the vulnerable code is not present or cannot run

	Severity	Advisory	Package	Version	Location	Fixed in	Method
▸	UNKNOWN	GO-2026-5841	github.com/klauspost/compress	v1.17.11	/csi-node-driver-registrar	1.18.7	pclntab
advisory GO-2026-5841 from golang fixed in 1.18.7 epss not scored — this advisory has no CVE id, and both feeds are keyed by CVE purl pkg:golang/github.com%2Fklauspost%2Fcompress@v1.17.11 binary /csi-node-driver-registrar packages github.com/klauspost/compress/s2 (package) vex vulnerable_code_not_present [pclntab]

Scan coverage#

Ecosystem	Components	Affected	Vexed	Undetermined	Ruled out	Status
`golang`	48	0	0	0	1	ok
`os`	8	0	0	0	0	ok

Hub	Author	Indexes	Matched	Status
https://github.com/rancher/vexhub	Rancher Security team	1168	0	ok

Triage: scored 0, 0 known exploited, 1 with no CVE id to look up. Feeds as of EPSS 2026-09-14; KEV 2026.09.14.