Browse Security Advisories
Security Advisories for k8s.io/kubernetes Clear Filters
Moderate
18 days ago
Kubernetes Nodes can delete themselves by adding an OwnerReference
go
k8s.io/kubernetes
Low
3 months ago
kubernetes allows nodes to bypass dynamic resource allocation authorization checks
go
k8s.io/kubernetes
Moderate
6 months ago
Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API
go
k8s.io/kubernetes
Moderate
6 months ago
Kubernetes GitRepo Volume Inadvertent Local Repository Access
go
k8s.io/kubernetes
High
10 months ago
Kubernetes Nil pointer dereference in KCM after v1 HPA patch request
go
k8s.io/kubernetes
High
about 1 year ago
Kubernetes sets incorrect permissions on Windows containers logs
go
k8s.io/kubernetes
Moderate
over 1 year ago
Privilege Escalation in Kubernetes
go
k8s.io/kubernetes, k8s.io/apimachinery
Low
over 1 year ago
Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin
go
k8s.io/kubernetes
Moderate
about 2 years ago
Kubelet vulnerable to bypass of seccomp profile enforcement
go
k8s.io/kubernetes
Moderate
over 2 years ago
Kubernetes client-go vulnerable to Sensitive Information Leak via Log File
go
k8s.io/kubernetes, k8s.io/client-go
Moderate
over 2 years ago
Kubernetes Sensitive Information leak via Log File
go
k8s.io/kubernetes, github.com/kubernetes/kubernetes
Moderate
over 3 years ago
Kubernetes client-go library logs may disclose credentials to unauthorized users
go
k8s.io/kubernetes, k8s.io/client-go
High
over 3 years ago
Kubernetes did not effectively clear service account credentials
go
k8s.io/kubernetes
Moderate
over 3 years ago
Directory Traversal in Kubernetes
go
k8s.io/kubernetes, github.com/kubernetes/kubernetes
Moderate
over 3 years ago
Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes
go
k8s.io/kubernetes
High
almost 4 years ago
Files or Directories Accessible to External Parties in kubernetes
go
k8s.io/kubernetes
High
over 4 years ago
XML Entity Expansion and Improper Input Validation in Kubernetes API server
go
k8s.io/kubernetes
Filter by Severity
Filter by Ecosystem
maven
6,869
packagist
5,422
pypi
4,942
npm
4,297
go
2,920
nuget
1,880
cargo
1,086
rubygems
927
actions
37
hex
37
swift
36
pub
10
Filter by Package
tensorflow
433
tensorflow-gpu
427
tensorflow-cpu
423
moodle/moodle
418
magento/community-edition
302
Microsoft.ChakraCore
247
org.jenkins-ci.main:jenkins-core
239
typo3/cms
190
com.liferay.portal:release.portal.bom
141
org.apache.tomcat:tomcat
136
com.liferay.portal:release.dxp.bom
125
github.com/mattermost/mattermost/server/v8
124
pimcore/pimcore
120
dolibarr/dolibarr
116
typo3/cms-core
114
Django
108
phpmyadmin/phpmyadmin
107
microweber/microweber
103
drupal/core
103
magento/project-community-edition
102
silverstripe/framework
92
apache-airflow
85
librenms/librenms
83
drupal/drupal
83
thorsten/phpmyfaq
73
Plone
72
com.fasterxml.jackson.core:jackson-databind
69
symfony/symfony
69
github.com/usememos/memos
68
concrete5/concrete5
67
salt
65
ansible
63
apache-superset
61
actionpack
61
shopware/platform
58
org.apache.struts:struts2-core
57
github.com/grafana/grafana
56
craftcms/cms
53
mlflow
53
org.keycloak:keycloak-core
50
github.com/hashicorp/vault
49
org.apache.tomcat.embed:tomcat-embed-core
48
mautic/core
48
nova
48
baserproject/basercms
47
django
46
nokogiri
46
shopware/core
46
github.com/mattermost/mattermost-server/v6
45
github.com/rancher/rancher
45
vyper
44
gradio
44
org.xwiki.platform:xwiki-platform-oldcore
43
rdiffweb
42
org.keycloak:keycloak-services
42
nilsteampassnet/teampass
42
matrix-synapse
42
k8s.io/kubernetes
42
showdoc/showdoc
41
plone
41
org.elasticsearch:elasticsearch
41
mantisbt/mantisbt
41
intelliants/subrion
40
froxlor/froxlor
40
directus
39
picklescan
39
github.com/mattermost/mattermost-server
38
com.thoughtworks.xstream:xstream
37
net.mingsoft:ms-mcms
36
com.jfinal:jfinal
36
snipe/snipe-it
36
moin
35
io.undertow:undertow-core
35
zendframework/zendframework1
34
org.jenkins-ci.plugins:script-security
34
github.com/answerdev/answer
34
parse-server
33
gogs.io/gogs
33
keystone
32
github.com/argoproj/argo-cd/v2
32
opencv-python
31
opencv-contrib-python
31
github.com/hashicorp/nomad
31
shopware/shopware
31
github.com/cilium/cilium
31
github.com/argoproj/argo-cd
31
github.com/docker/docker
31
getgrav/grav
30
github.com/hashicorp/consul
29
rack
29
Pillow
29
next
29
electron
29
contao/core-bundle
29
mediawiki/core
28
org.apache.solr:solr-core
28
pillow
28
prestashop/prestashop
27
centreon/centreon
27
org.opencms:opencms-core
27
openssl-src
26
org.springframework.security:spring-security-core
26
github.com/traefik/traefik/v2
25
vllm
25
org.eclipse.jetty:jetty-server
25
rubygems-update
25
open-webui
25
pocketmine/pocketmine-mp
25
surrealdb
24
magento/core
24
getkirby/cms
24
org.keycloak:keycloak-parent
24
phpoffice/phpexcel
23
org.bouncycastle:bcprov-jdk14
23
org.bouncycastle:bcprov-jdk15on
23
grumpydictator/firefly-iii
23
laravel/framework
23
zendframework/zendframework
23
simplesamlphp/simplesamlphp
23
puppet
23
org.apache.tomcat:tomcat-catalina
23
pyload-ng
23
remdex/livehelperchat
23
Microsoft.AspNetCore.App.Runtime.win-x64
22
DotNetNuke.Core
22
tribalsystems/zenario
22
phpoffice/phpspreadsheet
22
contao/contao
22
@openzeppelin/contracts-upgradeable
22
ckb
22
org.apache.openmeetings:openmeetings-parent
22
activerecord
22
Microsoft.AspNetCore.App.Runtime.win-x86
22
helm.sh/helm/v3
21
github.com/ethereum/go-ethereum
21
@openzeppelin/contracts
21
glance
21
Microsoft.AspNetCore.App.Runtime.win-arm
21
github.com/goharbor/harbor
21
org.apache.nifi:nifi
21
cockpit-hq/cockpit
20
code.gitea.io/gitea
20
aim
20
org.apache.tomcat:tomcat-coyote
20
org.cloudfoundry.identity:cloudfoundry-identity-server
20
wasmtime
20
funadmin/funadmin
20
golang.org/x/net
20
langchain
20
typo3/cms-backend
20
org.xwiki.platform:xwiki-platform-web-templates
20
ethyca-fides
20
Microsoft.AspNetCore.App.Runtime.linux-x64
19
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
19
Microsoft.AspNetCore.App.Runtime.osx-x64
19
github.com/zitadel/zitadel
19
Microsoft.AspNetCore.App.Runtime.linux-arm
19
topthink/framework
19
neutron
19
deno
19
Microsoft.AspNetCore.App.Runtime.linux-arm64
19
Microsoft.AspNetCore.App.Runtime.win-arm64
19
mercurial
18
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
18
genix/cms
18
forkcms/forkcms
18
cobbler
18
com.vaadin:vaadin-bom
18
flowise
18
org.apache.jspwiki:jspwiki-main
18
mindsdb
18
org.apache.inlong:manager-pojo
17
cryptography
17
ezsystems/ezpublish-kernel
17
yetiforce/yetiforce-crm
17
github.com/traefik/traefik/v3
17
calibreweb
17
cakephp/cakephp
17
francoisjacquet/rosariosis
17
opencart/opencart
17
org.springframework:spring-core
17
org.apache.geode:geode-core
17
symfony/security
17
github.com/openfga/openfga
17
notebook
17
OctoPrint
17
openmage/magento-lts
17
org.apache.activemq:activemq-client
16
Microsoft.NetCore.App.Runtime.win-x64
16
transformers
16
rusqlite
16
sequelize
16
Microsoft.NetCore.App.Runtime.win-arm64
16
tinymce
16
org.apache.dubbo:dubbo
16
Microsoft.NetCore.App.Runtime.win-x86
16
org.bouncycastle:bcprov-jdk15
16
Microsoft.NetCore.App.Runtime.win-arm
16
lollms
16
october/system
16