All products

github.com/KubeOperator/kubepi

Go · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
KubePi Privilege Escalation vulnerabilityCVE-2023-37917 · GHSA-757P-VX43-FP9RVersion ranges need review. github.com/KubeOperator/kubepi Go Critical Fix reported
KubePi session fixation attack allows an attacker to hijack a legitimate user session.CVE-2023-22479 · GHSA-V4W5-R2XC-7F8HVersion ranges need review. github.com/KubeOperator/kubepi Go High Fix reported
KubePi allows malicious actor to login with a forged JWT token via Hardcoded JwtsigkeysCVE-2023-22463 · GHSA-VJHF-8VQX-VQPQVersion ranges need review. github.com/KubeOperator/kubepi Go Critical Fix reported
KubePi may leak password hash of any userCVE-2023-37916 · GHSA-87F6-8GR7-PC6HVersion ranges need review. github.com/KubeOperator/kubepi Go Medium Fix reported
KubePi may allow unauthorized access to system APICVE-2023-22478 · GHSA-GQX8-HXMV-C4V4Version ranges need review. github.com/KubeOperator/kubepi Go High Fix reported