All products

github.com/k3s-io/k3s

Go · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot DecompressionCVE-2026-54250 · GHSA-JXR7-MQHW-9P98Version ranges need review. github.com/k3s-io/k3s Go Medium Fix reported
CNCF K3s Kubernetes kubelet configuration exposes credentialsCVE-2025-46599 · GHSA-864F-7XJM-2JP2Version ranges need review. github.com/k3s-io/k3s Go Medium Fix reported
K3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attackCVE-2023-32187 · GHSA-M4HF-6VGR-75R2 github.com/k3s-io/k3s Go High Fix reported