Skip to content
OpenAdvisories

Package · Go

github.com/karmada-io/karmada

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 5.3
    CVE-2024-56514

    Karmada Tar Slips in CRDs archive extraction

    Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, both in karmadactl and karmada-operator, it is possible to supply a filesystem path, or an HT…

    karmada-io karmada github.com/karmada-io/karmada Go
  • High 8.7
    CVE-2024-56513

    Karmada PULL Mode Cluster Privilege Escalation

    Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the `karmadactl register` command have excessive privi…

    karmada-io karmada github.com/karmada-io/karmada Go
  • High 8.4
    CVE-2024-33396

    An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted comman…

    github.com/karmada-io/karmada Go
  • Low —
    GHSA-7xg2-83f8-39mr

    The DES/3DES cipher was used as part of the TLS protocol by installation tools

    ### Impact _What kind of vulnerability is it? Who is impacted?_ The Karmada components deployed with `karmadactl`, `karma-operator`, and `helm chart` take Golang default cipher suites as part of the TLS protocol, which includes the insecure algorithm. Referri…

    github.com/karmada-io/karmada Go