All products

github.com/karmada-io/karmada

Go · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Karmada PULL Mode Cluster Privilege EscalationCVE-2024-56513 · GHSA-MG7W-C9X2-XH7RVersion ranges need review. github.com/karmada-io/karmada Go High Fix reported
Karmada Tar Slips in CRDs archive extractionCVE-2024-56514 · GHSA-CWRH-575J-8VR3Version ranges need review. github.com/karmada-io/karmada Go Medium Fix reported
karmada vulnerable to arbitrary code execution via a crafted command CVE-2024-33396 · GHSA-WCCG-V638-J9Q2Version ranges need review. github.com/karmada-io/karmada Go High No fix reported
The DES/3DES cipher was used as part of the TLS protocol by installation toolsGHSA-7XG2-83F8-39MR · GO-2024-2441Version ranges need review. github.com/karmada-io/karmada Go Low Fix reported