rancher/hardened-k8s-metrics-server:v0.9.0-build20260909 container image
Docker HubScanned 11 Oct 2026
Deployed by 1 of 18,090 indexed charts (latest versions) at this tag.Docker Hub all tags of rancher/hardened-k8s-metrics-server
rancher/hardened-k8s-metrics-server:v0.9.0-build20260909 resolved to 66d66121b3ef, scanned 11 Oct 2026: 24 findings, 0 critical; deployed by 1 chart, among them rke2-metrics-server.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
24 distinct on this digest
Findings for digest 66d66121b3ef as scanned on 11 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 11 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GO-2026-6107 | go.etcd.io/ | 3.5.33 |
| Medium | GO-2026-6612 | stdlib | 1.26.9 |
| Medium | GO-2026-6612 | golang.org/ | 0.60.0 |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GO-2026-6603 | golang.org/ | 0.60.0 |
| Low | GO-2026-6611 | golang.org/ | 0.60.0 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | GO-2026-6608 | stdlib | 1.26.9 |
| Low | GO-2026-6607 | stdlib | 1.26.9 |
| Low | GO-2026-6609 | stdlib | 1.26.9 |
| Low | GO-2026-6613 | stdlib | 1.26.9 |
| Low | GO-2026-6605 | stdlib | 1.26.9 |
| Low | GO-2026-6610 | stdlib | 1.26.9 |
| Low | GO-2026-6610 | golang.org/ | 0.60.0 |
| Low | GO-2026-6604 | stdlib | 1.26.9 |
| Low | GO-2026-6599 | stdlib | 1.26.9 |
| Low | GO-2026-6600 | stdlib | 1.26.9 |
| Low | GO-2026-6617 | stdlib | 1.26.9 |
| Low | GO-2026-6617 | golang.org/ | 0.60.0 |
| Low | GO-2026-6094 | github.com/ | 0.30.0 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/ | 1.45.0 |
| Low | GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/ | 1.45.0 |
| Low | GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/ | 1.45.0 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| rke2-metrics-serverrke2-charts | 3.14.1 | v0.9.0-build20260909 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.