rancher/hardened-calico:v3.13.3 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of rancher/hardened-calico
rancher/hardened-calico:v3.13.3 resolved to 6d2cd61a338b, scanned 14 Sept 2026: 192 findings, 2 critical, 2 on KEV; deployed by 1 chart, among them rke2-canal.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 6d2cd61a338b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | RHSA-2023:1095 | zlib | 0:1.2.7-21.el7_9 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | RHSA-2020:3916 | curl | 0:7.29.0-59.el7 |
| Medium | RHSA-2022:8640 | krb5 | 0:1.15.1-55.el7_9 |
| Medium | GHSA-f5f7-6478-qm6p | k8s.io/ | 1.19.15 |
| Medium | RHSA-2022:2191 | gzip | 0:1.5-11.el7_9 |
| Medium | RHSA-2022:5052 | xz | 0:5.2.2-2.el7_9 |
| Medium | RHSA-2020:3996 | libxml2 | 0:2.9.1-6.el7.5 |
| Medium | RHSA-2025:8314 | zlib | 0:1.2.7-21.el7_9.1 |
| Medium | GHSA-83g2-8m93-v3w7 | golang.org/ | 0.0.0-20210520170846-37e1c6afe023 |
| Medium | RHSA-2020:3952 | expat | 0:2.1.0-12.el7 |
| Medium | RHSA-2026:58563 | openssl | 1:1.0.2k-26.el7_9.2 |
| Medium | RHSA-2021:2147 | glib2 | 0:2.56.1-9.el7_9 |
| Medium | RHSA-2022:0666 | cyrus-sasl | 0:2.1.26-24.el7_9 |
| Medium | GHSA-cg3q-j54f-5p7p | github.com/ | 1.11.1 |
| Medium | GHSA-wqv3-8cm6-h6wg | k8s.io/ | 1.16.11 |
| Medium | GHSA-hq6q-c2x6-hmch | k8s.io/ | 1.25.16 |
| Medium | GHSA-v778-237x-gjrc | golang.org/ | 0.31.0 |
| Medium | GHSA-c3h9-896r-86jm | github.com/ | 1.3.2 |
| Medium | GHSA-q78c-gwqw-jcmc | k8s.io/ | 1.24.17 |
| Medium | GHSA-vvpx-j8f3-3w6h | golang.org/ | 0.7.0 |
| Medium | GHSA-33c5-9fx5-fvjm | k8s.io/ | 1.16.13 |
| Medium | GHSA-33c5-9fx5-fvjm | k8s.io/ | 0.16.13 |
| Medium | RHSA-2020:4076 | nss-util | 0:3.53.1-1.el7_9 |
| Medium | RHSA-2020:4076 | nspr | 0:4.25.0-2.el7_9 |
| Medium | RHSA-2020:4076 | nss | 0:3.53.1-3.el7_9 |
| Medium | RHSA-2020:4076 | nss-softokn | 0:3.53.1-6.el7_9 |
| Medium | RHSA-2020:4041 | openldap | 0:2.4.44-22.el7 |
| Medium | GHSA-8c26-wmh5-6g9v | golang.org/ | 0.0.0-20220314234659-1baeb1ce4c0b |
| Medium | RHSA-2021:1384 | nss | 0:3.53.1-7.el7_9 |
| Medium | GHSA-27wf-5967-98gx | k8s.io/ | 1.28.12 |
| Medium | GHSA-4374-p667-p6c8 | golang.org/ | 0.17.0 |
| Medium | GHSA-g42g-737j-qx6j | k8s.io/ | 1.18.18 |
| Medium | RHSA-2021:0348 | glibc | 0:2.17-322.el7_9 |
| Medium | RHSA-2020:5566 | openssl | 1:1.0.2k-21.el7_9 |
| Medium | GHSA-69cg-p879-7622 | golang.org/ | 0.0.0-20220906165146-f3363e06e74c |
| Medium | GHSA-3vm4-22fp-5rfm | golang.org/ | 0.0.0-20201216223049-8b5274cf687f |
| Medium | RHSA-2020:5012 | librepo | 0:1.8.1-8.el7_9 |
| Medium | RHSA-2021:3810 | libxml2 | 0:2.9.1-6.el7_9.6 |
| Medium | RHSA-2022:6160 | systemd | 0:219-78.el7_9.7 |
| Medium | RHSA-2022:6834 | expat | 0:2.1.0-15.el7_9 |
| Medium | GHSA-p77j-4mvh-x3m3 | google.golang.org/ | 1.79.3 |
| Medium | GHSA-j9wf-vvm6-4r9w | k8s.io/ | no fix listed |
| Medium | RHSA-2025:12240 | libxml2 | 0:2.9.1-6.el7_9.10 |
| Medium | GHSA-cjjc-xp8v-855w | golang.org/ | 0.0.0-20200124225646-8b5121be2f68 |
| Medium | RHSA-2020:3915 | libssh2 | 0:1.8.0-4.el7 |
| Medium | RHSA-2021:1389 | openldap | 0:2.4.44-23.el7_9 |
| Medium | GHSA-x6mj-w4jf-jmgw | k8s.io/ | 1.16.9 |
| Medium | GHSA-w73w-5m7g-f7qc | github.com/ | no fix listed |
| Medium | GHSA-wxc4-f4m6-wwqv | gopkg.in/ | 2.2.8 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| rke2-canalrke2-charts | 3.13.3 | v3.13.3 | 3 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.