registry.rancher.com/rancher/hardened-vsphere-csi-syncer:v3.7.3-build20260909

image scan · 2 findings

ALREADY VEXED

somebody has answered

UNDETERMINED

needs a human

RULED OUT

not present or unreachable

AFFECTED(2) — vulnerable code is present and can be loaded

	Severity	Advisory	Package	Version	Location	EPSS
▸	MEDIUM	CVE-2025-1767	k8s.io/kubernetes	v1.35.0	/syncer	44.5%
advisory CVE-2025-1767 (also GO-2025-3521) from golang severity MEDIUM CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N epss 44.5% 44.5% percentile (epss 0.00553) purl pkg:golang/k8s.io%2Fkubernetes@v1.35.0 binary /syncer packages k8s.io/kubernetes (module) [prefer-vendor]SUSE Security Team rates this MEDIUM, used instead of UNKNOWN (preferred vendor score)
▸	LOW	CVE-2024-7598	k8s.io/kubernetes	v1.35.0	/syncer	24.2%
advisory CVE-2024-7598 (also GO-2025-3547) from golang severity LOW CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N epss 24.2% 24.2% percentile (epss 0.00314) purl pkg:golang/k8s.io%2Fkubernetes@v1.35.0 binary /syncer packages k8s.io/kubernetes (module) [prefer-vendor]SUSE Security Team rates this LOW, used instead of UNKNOWN (preferred vendor score)

Scan coverage#

Ecosystem	Components	Affected	Vexed	Undetermined	Ruled out	Status
`golang`	77	2	0	0	0	ok
`os`	8	0	0	0	0	ok

Hub	Author	Indexes	Matched	Status
https://github.com/rancher/vexhub	Rancher Security team	1168	0	ok

Triage: scored 2, 0 known exploited. Feeds as of EPSS 2026-09-14; KEV 2026.09.14.