registry.rancher.com/rancher/hardened-whereabouts:v0.9.4-build20260819

image scan · 1 finding

ALREADY VEXED

somebody has answered

UNDETERMINED

needs a human

RULED OUT

not present or unreachable

AFFECTED(1) — vulnerable code is present and can be loaded

	Severity	Advisory	Package	Version	Fixed in	EPSS	Method
▸	MEDIUM	SUSE-SU-2026:3933-1	busybox	0:1.37.0-150700.18.18.1	1.37.0-150700.18.21.1	34.7%	elf-needed-closure
advisory SUSE-SU-2026:3933-1 fixes CVE-2023-42366, CVE-2026-38752, CVE-2026-38753, CVE-2026-38754, CVE-2026-38755 from os severity MEDIUM CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H fixed in 1.37.0-150700.18.21.1 epss 34.7% 34.7% percentile (epss 0.00412) for CVE-2023-42366, highest of 5 purl pkg:rpm/sles/busybox@0:1.37.0-150700.18.18.1?arch=x86_64 method elf-needed-closure [elf-needed-closure]/usr/bin/busybox is shell entrypoint [elf-needed-closure]blocking/usr/lib64/libselinux.so.1 calls dlopen, so what it loads is decided at runtime [prefer-vendor]SUSE Security Team rates this MEDIUM, used instead of UNKNOWN (preferred vendor score)

Severity

Advisory

Package

Version

Fixed in

EPSS

Method

MEDIUM

busybox

0:1.37.0-150700.18.18.1

1.37.0-150700.18.21.1

34.7%

elf-needed-closure

Scan coverage#

Ecosystem	Components	Affected	Vexed	Undetermined	Ruled out	Status
`golang`	54	0	0	0	0	ok
`os`	66	1	0	0	0	ok

Hub	Author	Indexes	Matched	Status
https://github.com/rancher/vexhub	Rancher Security team	1168	0	ok

Triage: scored 1, 0 known exploited. Feeds as of EPSS 2026-09-14; KEV 2026.09.14.