Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-5jpj-293f-rhvj
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API 6 days ago
  • Fix available
  • Severity - 8.8 (High)
GHSA-gfw4-49f9-cp25
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub 6 days ago
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-9vm9-pqxx-x83v
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join 6 days ago
  • Fix available
  • Severity - 8.1 (High)
GHSA-m3c6-2p7h-cfr3
  • Go/github.com/kubeedge/kubeedge
 KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes 6 days ago
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-62182
  • github.com/kubeedge/kubeedge
 KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes 21 Sep
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-62369
  • github.com/kubeedge/kubeedge
 KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join 21 Sep
  • Fix available
  • Severity - 8.1 (High)
CVE-2026-62370
  • github.com/kubeedge/kubeedge
 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub 21 Sep
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2026-62371
  • github.com/kubeedge/kubeedge
 KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API 21 Sep
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-82473
  • github.com/kubeedge/kubeedge
 KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints 29 Aug
  • Fix available
  • Severity - 8.8 (High)
GO-2022-0507
  • Go/github.com/kubeedge/kubeedge
 KubeEdge Edge ServiceBus module DoS in github.com/kubeedge/kubeedge 21 Aug 2024
  • Fix available
GO-2022-0508
  • Go/github.com/kubeedge/kubeedge
 KubeEdge Cloud AdmissionController component DoS in github.com/kubeedge/kubeedge 21 Aug 2024
  • Fix available
GO-2022-0509
  • Go/github.com/kubeedge/kubeedge
 KubeEdge DoS when signing the CSR from EdgeCore in github.com/kubeedge/kubeedge 21 Aug 2024
  • Fix available
GO-2022-0510
  • Go/github.com/kubeedge/kubeedge
 KubeEdge CloudCore Router memory exhaustion vulnerability in github.com/kubeedge/kubeedge 21 Aug 2024
  • Fix available
GO-2022-0511
  • Go/github.com/kubeedge/kubeedge
 KubeEdge Cloud Stream and Edge Stream DoS from large stream message in github.com/kubeedge/kubeedge 21 Aug 2024
  • Fix available
GO-2022-0512
  • Go/github.com/kubeedge/kubeedge
 DoS in KubeEdge's Websocket Client in package Viaduct in github.com/kubeedge/kubeedge 21 Aug 2024
  • Fix available
GO-2022-0500
  • Go/github.com/kubeedge/kubeedge
 CloudCore UDS Server: Malicious Message can crash CloudCore in github.com/kubeedge/kubeedge 21 Aug 2024
  • Fix available
Load more...