Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-6mx4-4h42-r8vh
  • npm/mcp-server-kubernetes
 MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration 05 Jun
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-cr22-wjx7-2w6m
  • npm/mcp-server-kubernetes
 MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering Without Execution-Layer Enforcement 21 May
  • Fix available
  • Severity - 8.8 (High)
GHSA-4xqg-gf5c-ghwq
  • npm/mcp-server-kubernetes
 MCP Server Kubernetes has an Argument Injection in port_forward tool via space-splitting 14 Apr
  • Fix available
  • Severity - 8.3 (High)
GHSA-wvxp-jp4w-w8wg
  • npm/mcp-server-kubernetes
 mcp-server-kubernetes has potential security issue in exec_in_pod tool 03 Dec 2025
  • Fix available
  • Severity - 6.4 (Medium)
GHSA-gjv4-ghm7-q58q
  • npm/mcp-server-kubernetes
 MCP Server Kubernetes vulnerable to command injection in several tools 08 Jul 2025
  • Fix available
  • Severity - 7.5 (High)