Skip to content
OpenAdvisories

Package · Go

github.com/chaos-mesh/chaos-mesh

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-59358

    Denial of Service via Unauthorized Access to Chaos Mesh debugging server

    The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service.

    github.com/chaos-mesh/chaos-mesh Go