github.com/KubeOperator/kubepi vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-37916Mediumgithub.com/KubeOperator/kubepi: KubePi may leak password hash of any user CVE-2023-37917Criticalgithub.com/KubeOperator/kubepi: KubePi Privilege Escalation vulnerability CVE-2023-22479Highgithub.com/KubeOperator/kubepi: KubePi session fixation attack allows an attacker to hijack a legitimate user session.CVE-2023-22478Highgithub.com/KubeOperator/kubepi: KubePi may allow unauthorized access to system API CVE-2023-22463Criticalgithub.com/KubeOperator/kubepi: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo