public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.13.0-eks-1-33-8
Base OS: amazon 2 (Karoo)clean
Patched Image
ghcr.io/verity-org/aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.13.0-eks-1-33-8
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.13.0-eks-1-33-8
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.13.0-eks-1-33-8 \ --owner verity-org
Before patching
Found 49 vulnerabilities — none have upstream fixes available.
2 CRITICAL18 HIGH26 MEDIUM2 LOW1 UNKNOWN
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2026-33186CRITICAL
- Package
- google.golang.org/grpc
- Installed
- v1.69.0
- Fixed
- 1.79.3
- CVE-2025-68121CRITICAL
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.13, 1.25.7, 1.26.0-rc.3
- CVE-2026-25681HIGH
- Package
- golang.org/x/net
- Installed
- v0.39.0
- Fixed
- 0.55.0
- CVE-2026-27136HIGH
- Package
- golang.org/x/net
- Installed
- v0.39.0
- Fixed
- 0.55.0
- CVE-2026-33814HIGH
- Package
- golang.org/x/net
- Installed
- v0.39.0
- Fixed
- 0.53.0
- CVE-2026-39821HIGH
- Package
- golang.org/x/net
- Installed
- v0.39.0
- Fixed
- 0.55.0
- CVE-2026-42502HIGH
- Package
- golang.org/x/net
- Installed
- v0.39.0
- Fixed
- 0.55.0
- CVE-2025-61726HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61729HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.11, 1.25.5
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504HIGH
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.11, 1.26.4
- CVE-2025-47911MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.39.0
- Fixed
- 0.45.0
- CVE-2025-58190MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.39.0
- Fixed
- 0.45.0
- CVE-2026-25680MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.39.0
- Fixed
- 0.55.0
- CVE-2026-42506MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.39.0
- Fixed
- 0.55.0
- CVE-2025-47906MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47907MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47912MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58183MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58185MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58187MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.9, 1.25.3
- CVE-2025-58188MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58189MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61723MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61724MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61725MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61727MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.11, 1.25.5
- CVE-2025-61728MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61730MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.11, 1.26.4
- CVE-2025-58186LOW
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.24.8, 1.25.2
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-39824UNKNOWN
- Package
- golang.org/x/sys
- Installed
- v0.32.0
- Fixed
- 0.44.0
- CVE-2026-39822UNKNOWN
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-42505UNKNOWN
- Package
- stdlib
- Installed
- v1.23.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-33186 | google.golang.org/grpc | v1.69.0 | 1.79.3 | CRITICAL |
| CVE-2025-68121 | stdlib | v1.23.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CRITICAL |
| CVE-2026-25681 | golang.org/x/net | v0.39.0 | 0.55.0 | HIGH |
| CVE-2026-27136 | golang.org/x/net | v0.39.0 | 0.55.0 | HIGH |
| CVE-2026-33814 | golang.org/x/net | v0.39.0 | 0.53.0 | HIGH |
| CVE-2026-39821 | golang.org/x/net | v0.39.0 | 0.55.0 | HIGH |
| CVE-2026-42502 | golang.org/x/net | v0.39.0 | 0.55.0 | HIGH |
| CVE-2025-61726 | stdlib | v1.23.11 | 1.24.12, 1.25.6 | HIGH |
| CVE-2025-61729 | stdlib | v1.23.11 | 1.24.11, 1.25.5 | HIGH |
| CVE-2026-25679 | stdlib | v1.23.11 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.23.11 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.23.11 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.23.11 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.23.11 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.23.11 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.23.11 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.23.11 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39836 | stdlib | v1.23.11 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.23.11 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42504 | stdlib | v1.23.11 | 1.25.11, 1.26.4 | HIGH |
| CVE-2025-47911 | golang.org/x/net | v0.39.0 | 0.45.0 | MEDIUM |
| CVE-2025-58190 | golang.org/x/net | v0.39.0 | 0.45.0 | MEDIUM |
| CVE-2026-25680 | golang.org/x/net | v0.39.0 | 0.55.0 | MEDIUM |
| CVE-2026-42506 | golang.org/x/net | v0.39.0 | 0.55.0 | MEDIUM |
| CVE-2025-47906 | stdlib | v1.23.11 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47907 | stdlib | v1.23.11 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47912 | stdlib | v1.23.11 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58183 | stdlib | v1.23.11 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58185 | stdlib | v1.23.11 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58187 | stdlib | v1.23.11 | 1.24.9, 1.25.3 | MEDIUM |
| CVE-2025-58188 | stdlib | v1.23.11 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58189 | stdlib | v1.23.11 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61723 | stdlib | v1.23.11 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61724 | stdlib | v1.23.11 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61725 | stdlib | v1.23.11 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61727 | stdlib | v1.23.11 | 1.24.11, 1.25.5 | MEDIUM |
| CVE-2025-61728 | stdlib | v1.23.11 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2025-61730 | stdlib | v1.23.11 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.23.11 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.23.11 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.23.11 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.23.11 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.23.11 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.23.11 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.23.11 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.23.11 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2025-58186 | stdlib | v1.23.11 | 1.24.8, 1.25.2 | LOW |
| CVE-2026-27139 | stdlib | v1.23.11 | 1.25.8, 1.26.1 | LOW |
| CVE-2026-39824 | golang.org/x/sys | v0.32.0 | 0.44.0 | UNKNOWN |
| CVE-2026-39822 | stdlib | v1.23.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | UNKNOWN |
| CVE-2026-42505 | stdlib | v1.23.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | UNKNOWN |
Original image reference
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.13.0-eks-1-33-8