Update CVE scans reports - 2026-03-12

Author: rancher-security-team[bot]

docs/csv/report-harvester-master-cves.csv

@@ -1,20 +1,20 @@
 image,critical,high,total
 ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.2,2,19,21
 kubeovn/kube-ovn:v1.14.10,0,31,31
-longhornio/backing-image-manager:v1.11.0,0,12,12
-longhornio/csi-attacher:v4.10.0-20251226,0,1,1
-longhornio/csi-node-driver-registrar:v2.15.0-20251226,0,1,1
-longhornio/csi-provisioner:v5.3.0-20251226,0,1,1
-longhornio/csi-resizer:v2.0.0-20251226,0,1,1
-longhornio/csi-snapshotter:v8.4.0-20251226,0,1,1
-longhornio/livenessprobe:v2.17.0-20251226,0,1,1
-longhornio/longhorn-cli:v1.11.0,0,5,5
-longhornio/longhorn-engine:v1.11.0,0,10,10
-longhornio/longhorn-instance-manager:v1.11.0,0,14,14
-longhornio/longhorn-manager:v1.11.0,0,7,7
-longhornio/longhorn-share-manager:v1.11.0,0,5,5
-longhornio/longhorn-ui:v1.11.0,0,4,4
-longhornio/support-bundle-kit:v0.0.79,3,5,8
+longhornio/backing-image-manager:v1.11.1-rc1,0,0,0
+longhornio/csi-attacher:v4.11.0,0,1,1
+longhornio/csi-node-driver-registrar:v2.16.0,0,0,0
+longhornio/csi-provisioner:v5.3.0-20260225,0,0,0
+longhornio/csi-resizer:v2.1.0,0,1,1
+longhornio/csi-snapshotter:v8.5.0,0,0,0
+longhornio/livenessprobe:v2.18.0,0,0,0
+longhornio/longhorn-cli:v1.11.1-rc1,0,0,0
+longhornio/longhorn-engine:v1.11.1-rc1,0,0,0
+longhornio/longhorn-instance-manager:v1.11.1-rc1,0,0,0
+longhornio/longhorn-manager:v1.11.1-rc1,0,0,0
+longhornio/longhorn-share-manager:v1.11.1-rc1,0,0,0
+longhornio/longhorn-ui:v1.11.1-rc1,0,0,0
+longhornio/support-bundle-kit:v0.0.80,0,0,0
 rancher/appco-alertmanager:0.28.1-12.7,0,4,4
 rancher/appco-grafana:12.1.1-2.2,3,17,20
 rancher/appco-k8s-sidecar:1.30.7-11.3,1,13,14

docs/csv/report-harvester-master-stats.csv

@@ -473,7 +473,6 @@ longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,samba-client-lib
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,virtiofsd,1.12.0-150700.1.8,sles,SUSE-SU-2026:0819-1,HIGH,,longhornio/longhorn-instance-manager:v1.9.2 (sles 15.7),1.12.0-150700.3.3.1,false,affected,
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,cryptography,46.0.1,python-pkg,CVE-2026-26007,HIGH,https://avd.aquasec.com/nvd/cve-2026-26007,Python,46.0.5,false,affected,
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,protobuf,6.32.1,python-pkg,CVE-2026-0994,HIGH,https://avd.aquasec.com/nvd/cve-2026-0994,Python,"6.33.5, 5.29.6",false,affected,
-longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.6,gobinary,CVE-2026-25679,LOW,https://avd.aquasec.com/nvd/cve-2026-25679,usr/local/bin/go-spdk-helper,"1.25.8, 1.26.1",false,affected,severity_changed_due_to_suse_cvss_score
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.6,gobinary,CVE-2025-68121,CRITICAL,https://avd.aquasec.com/nvd/cve-2025-68121,usr/local/bin/go-spdk-helper,"1.24.13, 1.25.7, 1.26.0-rc.3",false,not_affected,vulnerable_code_not_present
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.6,gobinary,CVE-2025-58183,HIGH,https://avd.aquasec.com/nvd/cve-2025-58183,usr/local/bin/go-spdk-helper,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.6,gobinary,CVE-2025-61726,HIGH,https://avd.aquasec.com/nvd/cve-2025-61726,usr/local/bin/go-spdk-helper,"1.24.12, 1.25.6",false,not_affected,vulnerable_code_not_in_execute_path
@@ -490,6 +489,8 @@ longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.6,g
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.6,gobinary,CVE-2025-61725,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61725,usr/local/bin/go-spdk-helper,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.6,gobinary,CVE-2025-61727,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61727,usr/local/bin/go-spdk-helper,"1.24.11, 1.25.5",false,not_affected,vulnerable_code_not_present
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.6,gobinary,CVE-2025-61730,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61730,usr/local/bin/go-spdk-helper,"1.24.12, 1.25.6",false,not_affected,vulnerable_code_not_present
+longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.6,gobinary,CVE-2026-25679,MEDIUM,https://avd.aquasec.com/nvd/cve-2026-25679,usr/local/bin/go-spdk-helper,"1.25.8, 1.26.1",false,not_affected,vulnerable_code_not_in_execute_path
+longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.6,gobinary,CVE-2026-27142,MEDIUM,https://avd.aquasec.com/nvd/cve-2026-27142,usr/local/bin/go-spdk-helper,"1.25.8, 1.26.1",false,not_affected,vulnerable_code_not_present
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.5,gobinary,CVE-2025-68121,HIGH,https://avd.aquasec.com/nvd/cve-2025-68121,usr/local/bin/grpc_health_probe,"1.24.13, 1.25.7, 1.26.0-rc.3",false,affected,severity_changed_due_to_suse_cvss_score
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.5,gobinary,CVE-2025-61729,HIGH,https://avd.aquasec.com/nvd/cve-2025-61729,usr/local/bin/grpc_health_probe,"1.24.11, 1.25.5",false,affected,
 longhornio/longhorn-instance-manager:v1.9.2,harvester/v1.6-head,stdlib,v1.24.5,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,usr/local/bin/grpc_health_probe,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
@@ -840,7 +841,6 @@ rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-58186,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58186,opt/cni/bin/firewall,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_in_execute_path
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61724,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61724,opt/cni/bin/firewall,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_in_execute_path
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61725,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61725,opt/cni/bin/firewall,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
-rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2026-25679,LOW,https://avd.aquasec.com/nvd/cve-2026-25679,opt/cni/bin/flannel,"1.25.8, 1.26.1",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-68121,CRITICAL,https://avd.aquasec.com/nvd/cve-2025-68121,opt/cni/bin/flannel,"1.24.13, 1.25.7, 1.26.0-rc.3",false,not_affected,vulnerable_code_not_present
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-58183,HIGH,https://avd.aquasec.com/nvd/cve-2025-58183,opt/cni/bin/flannel,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61726,HIGH,https://avd.aquasec.com/nvd/cve-2025-61726,opt/cni/bin/flannel,"1.24.12, 1.25.6",false,not_affected,vulnerable_code_not_present
@@ -857,6 +857,8 @@ rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61725,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61725,opt/cni/bin/flannel,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61727,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61727,opt/cni/bin/flannel,"1.24.11, 1.25.5",false,not_affected,vulnerable_code_not_present
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61730,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61730,opt/cni/bin/flannel,"1.24.12, 1.25.6",false,not_affected,vulnerable_code_not_present
+rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2026-25679,MEDIUM,https://avd.aquasec.com/nvd/cve-2026-25679,opt/cni/bin/flannel,"1.25.8, 1.26.1",false,not_affected,vulnerable_code_not_present
+rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2026-27142,MEDIUM,https://avd.aquasec.com/nvd/cve-2026-27142,opt/cni/bin/flannel,"1.25.8, 1.26.1",false,not_affected,vulnerable_code_not_present
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-68121,HIGH,https://avd.aquasec.com/nvd/cve-2025-68121,opt/cni/bin/host-device,"1.24.13, 1.25.7, 1.26.0-rc.3",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61729,HIGH,https://avd.aquasec.com/nvd/cve-2025-61729,opt/cni/bin/host-device,"1.24.11, 1.25.5",false,affected,
 rancher/hardened-calico:v3.30.3-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,opt/cni/bin/host-device,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
@@ -1184,7 +1186,6 @@ rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-58186,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-58186,opt/cni/bin/firewall,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_in_execute_path
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61724,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61724,opt/cni/bin/firewall,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_in_execute_path
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61725,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61725,opt/cni/bin/firewall,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
-rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2026-25679,LOW,https://avd.aquasec.com/nvd/cve-2026-25679,opt/cni/bin/flannel,"1.25.8, 1.26.1",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-68121,CRITICAL,https://avd.aquasec.com/nvd/cve-2025-68121,opt/cni/bin/flannel,"1.24.13, 1.25.7, 1.26.0-rc.3",false,not_affected,vulnerable_code_not_present
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-58183,HIGH,https://avd.aquasec.com/nvd/cve-2025-58183,opt/cni/bin/flannel,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61726,HIGH,https://avd.aquasec.com/nvd/cve-2025-61726,opt/cni/bin/flannel,"1.24.12, 1.25.6",false,not_affected,vulnerable_code_not_present
@@ -1201,6 +1202,8 @@ rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61725,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61725,opt/cni/bin/flannel,"1.24.8, 1.25.2",false,not_affected,vulnerable_code_not_present
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61727,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61727,opt/cni/bin/flannel,"1.24.11, 1.25.5",false,not_affected,vulnerable_code_not_present
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61730,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61730,opt/cni/bin/flannel,"1.24.12, 1.25.6",false,not_affected,vulnerable_code_not_present
+rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2026-25679,MEDIUM,https://avd.aquasec.com/nvd/cve-2026-25679,opt/cni/bin/flannel,"1.25.8, 1.26.1",false,not_affected,vulnerable_code_not_present
+rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2026-27142,MEDIUM,https://avd.aquasec.com/nvd/cve-2026-27142,opt/cni/bin/flannel,"1.25.8, 1.26.1",false,not_affected,vulnerable_code_not_present
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-68121,HIGH,https://avd.aquasec.com/nvd/cve-2025-68121,opt/cni/bin/host-device,"1.24.13, 1.25.7, 1.26.0-rc.3",false,affected,severity_changed_due_to_suse_cvss_score
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-61729,HIGH,https://avd.aquasec.com/nvd/cve-2025-61729,opt/cni/bin/host-device,"1.24.11, 1.25.5",false,affected,
 rancher/hardened-cni-plugins:v1.8.0-build20250909,harvester/v1.6-head,stdlib,v1.24.7,gobinary,CVE-2025-47912,HIGH,https://avd.aquasec.com/nvd/cve-2025-47912,opt/cni/bin/host-device,"1.24.8, 1.25.2",false,affected,severity_changed_due_to_suse_cvss_score
@@ -2041,6 +2044,7 @@ rancher/harvester-upgrade:v1.6-head,harvester/v1.6-head,stdlib,v1.25.4,gobinary,
 rancher/harvester-upgrade:v1.6-head,harvester/v1.6-head,stdlib,v1.25.4,gobinary,CVE-2025-61729,HIGH,https://avd.aquasec.com/nvd/cve-2025-61729,usr/bin/yq,"1.24.11, 1.25.5",false,not_affected,vulnerable_code_not_in_execute_path
 rancher/harvester-upgrade:v1.6-head,harvester/v1.6-head,stdlib,v1.25.4,gobinary,CVE-2025-61727,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61727,usr/bin/yq,"1.24.11, 1.25.5",false,not_affected,vulnerable_code_not_in_execute_path
 rancher/harvester-upgrade:v1.6-head,harvester/v1.6-head,stdlib,v1.25.4,gobinary,CVE-2025-61730,MEDIUM,https://avd.aquasec.com/nvd/cve-2025-61730,usr/bin/yq,"1.24.12, 1.25.6",false,not_affected,vulnerable_code_not_in_execute_path
+rancher/harvester-upgrade:v1.6-head,harvester/v1.6-head,stdlib,v1.25.4,gobinary,CVE-2026-27142,MEDIUM,https://avd.aquasec.com/nvd/cve-2026-27142,usr/bin/yq,"1.25.8, 1.26.1",false,not_affected,vulnerable_code_not_present
 rancher/harvester-upgrade:v1.6-head,harvester/v1.6-head,github.com/containerd/containerd,v1.7.12,gobinary,CVE-2024-25621,HIGH,https://avd.aquasec.com/nvd/cve-2024-25621,usr/local/bin/elemental,1.7.29,false,affected,
 rancher/harvester-upgrade:v1.6-head,harvester/v1.6-head,github.com/docker/docker,v23.0.8+incompatible,gobinary,CVE-2024-41110,CRITICAL,https://avd.aquasec.com/nvd/cve-2024-41110,usr/local/bin/elemental,"23.0.15, 26.1.5, 27.1.1, 25.0.6",false,affected,
 rancher/harvester-upgrade:v1.6-head,harvester/v1.6-head,github.com/go-git/go-git/v5,v5.11.0,gobinary,CVE-2025-21613,HIGH,https://avd.aquasec.com/nvd/cve-2025-21613,usr/local/bin/elemental,5.13.0,false,affected,severity_changed_due_to_suse_cvss_score