Rancher's restricted PodSecurityPolicy does not prevent containers from running as a privileged user
Go github.com/rancher/rancher · Upgrade to 2.6.4 or later · >= 2.0.0, < 2.6.4 · GHSA-hwm2-4ph6-w6m5
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
9751–9775 of 31,071 matching · newest first
Go github.com/rancher/rancher · Upgrade to 2.6.4 or later · >= 2.0.0, < 2.6.4 · GHSA-hwm2-4ph6-w6m5
Go github.com/rancher/rancher · Upgrade to 2.6.5 or 2.5.14 by release line · >= 2.6.0, <= 2.6.4; >= 2.5.0, <= 2.5.13 · CVE-2022-21951 · GHSA-vrph-m5jj-c46c
Go github.com/rancher/rancher · Upgrade to 2.6.7 or 2.5.16 by release line · >= 2.5.0, <= 2.5.15; >= 2.6.0, <= 2.6.6 · CVE-2022-31247 · GHSA-6x34-89p7-95wg
Go github.com/rancher/rancher · Upgrade to 2.6.4 or 2.5.13 by release line · >= 2.5.0, <= 2.5.12; >= 2.6.0, <= 2.6.3 · CVE-2021-36783 · GHSA-8w87-58w6-hfv8
Go github.com/rancher/rancher · Upgrade to 2.7.4 or 2.6.13 by release line · >= 2.6.7, < 2.6.13; >= 2.7.0, < 2.7.4 · CVE-2023-22648 · GHSA-vf6j-6739-78m8
Maven org.apache.ranger:ranger-nifi-registry-plugin · Upgrade to 2.8.0 or later · < 2.8.0 · CVE-2025-59060 · GHSA-5fvg-qwcp-r325
Maven org.apache.ranger:ranger-plugins-common · Upgrade to 2.8.0 or later · < 2.8.0 · CVE-2025-59059 · GHSA-c87w-642h-m97h
npm mailparser · Upgrade to 3.9.3 or later · < 3.9.3 · CVE-2026-3455 · GHSA-7gmj-h9xc-mcxc · amended
npm @tootallnate/once · Upgrade to 3.0.1 or 2.0.1 by release line · >= 3.0.0, < 3.0.1; < 2.0.1 · CVE-2026-3449 · GHSA-vpq2-c234-7xj6 · amended
npm openclaw · Upgrade to 2026.2.22 or later · < 2026.2.22 · CVE-2026-32016 · GHSA-7f4q-9rqh-x36p · amended
npm openclaw · Upgrade to 2026.2.22 or later · < 2026.2.22 · CVE-2026-32003 · GHSA-2fgq-7j6h-9rm4 · amended
npm openclaw · Upgrade to 2026.2.26 or later · <= 2026.2.25 · CVE-2026-32014 · GHSA-r65x-2hqr-j5hf · amended
npm openclaw · Upgrade to 2026.2.25 or later · <= 2026.2.24 · CVE-2026-3691 · GHSA-6g25-pc82-vfwp · amended
npm openclaw · Upgrade to 2026.2.22 or later · < 2026.2.22 · GHSA-5847-rm3g-23mw · amended
npm openclaw · Upgrade to 2026.2.22 or later · < 2026.2.22 · CVE-2026-32024 · GHSA-rx3g-mvc3-qfjf · amended
npm openclaw · Upgrade to 2026.2.24 or later · <= 2026.2.23 · CVE-2026-32038 · GHSA-ww6v-v748-x7g9 · amended
npm openclaw · Upgrade to 2026.2.26 or later · <= 2026.2.25 · CVE-2026-27545 · GHSA-f7ww-2725-qvw2 · amended
npm openclaw · Upgrade to 2026.2.24 or later · <= 2026.2.23 · CVE-2026-27522 · GHSA-fqcm-97m6-w7rm · amended
npm openclaw · Upgrade to 2026.2.25 or later · <= 2026.2.24 · CVE-2026-32065 · GHSA-hwpq-rrpf-pgcq · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · GHSA-943q-mwmv-hhvh · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-28466 · GHSA-gv46-4xfq-jv58 · amended
npm openclaw · Upgrade to 2026.2.14 or later · >= 2026.1.16-2, < 2026.2.14 · CVE-2026-28486 · GHSA-v892-hwpg-jwqp · amended
npm openclaw · Upgrade to 2026.2.14 or later · < 2026.2.14 · CVE-2026-28457 · GHSA-xw4p-pw82-hqr7 · amended
npm openclaw · Upgrade to 2026.2.12 or later · < 2026.2.12 · CVE-2026-28464 · GHSA-jmm5-fvh5-gf4p · amended
npm openclaw · Upgrade to 2026.2.13 or later · < 2026.2.13 · CVE-2026-28475 · GHSA-47q7-97xp-m272 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.