Skip to content
OpenAdvisories

Package · Go

github.com/fluid-cloudnative/fluid

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.0
    CVE-2023-51699

    OS Command Injection for Fluid Users with JuicefsRuntime

    Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection vulnerability within the Fluid project's JuicefsRuntime can potentially allow an authenticated user, who has th…

    fluid-cloudnative fluid github.com/fluid-cloudnative/fluid Go
  • Medium 5.8
    CVE-2023-30840

    On a compromised node, the fluid-csi service account can be used to modify node specs

    Fluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applications. Starting in version 0.7.0 and prior to version 0.8.6, if a malicious user gains control of a Kubernetes node running fluid csi pod (con…

    fluid-cloudnative fluid github.com/fluid-cloudnative/fluid Go