Skip to content
OpenAdvisories

Package · Go

github.com/kcp-dev/kcp

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-39429

    kcp's cache server is accessible without authentication or authorization checks

    kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.30.3 and 0.29.3, the cache server is directly exposed by the root shard and has no authentication or authorization in place. This allow…

    kcp-dev kcp github.com/kcp-dev/kcp Go