Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-6557
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API in github.com/kubeedge/kubeedge 4 days ago
  • Fix available
GO-2026-6563
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join in github.com/kubeedge/kubeedge 4 days ago
  • Fix available
GO-2026-6569
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub in github.com/kubeedge/kubeedge 4 days ago
  • Fix available
GO-2026-6573
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes in github.com/kubeedge/kubeedge 4 days ago
  • Fix available
GHSA-5jpj-293f-rhvj
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API 22 Sep
  • Fix available
  • Severity - 8.8 (High)
GHSA-gfw4-49f9-cp25
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub 22 Sep
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-9vm9-pqxx-x83v
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join 22 Sep
  • Fix available
  • Severity - 8.1 (High)
GHSA-m3c6-2p7h-cfr3
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes 22 Sep
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-62182
  • github.com/kubeedge/kubeedge
 KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes 21 Sep
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-62369
  • github.com/kubeedge/kubeedge
 KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join 21 Sep
  • Fix available
  • Severity - 8.1 (High)
CVE-2026-62370
  • github.com/kubeedge/kubeedge
 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub 21 Sep
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2026-62371
  • github.com/kubeedge/kubeedge
 KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API 21 Sep
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-82473
  • github.com/kubeedge/kubeedge
 KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints 29 Aug
  • Fix available
  • Severity - 8.8 (High)
GO-2022-0507
  • Go/github.com/kubeedge/kubeedge
 KubeEdge Edge ServiceBus module DoS in github.com/kubeedge/kubeedge 21 Aug 2024
  • Fix available
GO-2022-0508
  • Go/github.com/kubeedge/kubeedge
 KubeEdge Cloud AdmissionController component DoS in github.com/kubeedge/kubeedge 21 Aug 2024
  • Fix available
GO-2022-0509
  • Go/github.com/kubeedge/kubeedge
 KubeEdge DoS when signing the CSR from EdgeCore in github.com/kubeedge/kubeedge 21 Aug 2024
  • Fix available
Load more...