Skip to content
OpenAdvisories

Package · Go

github.com/kcp-dev/kcp

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-q6hv-wcjr-wp8h

    kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace

    ### Impact Because UPDATE validation is not being applied, it is possible for an actor with access to an instance of the [initializingworkspaces virtual workspace](https://docs.kcp.io/kcp/latest/concepts/workspaces/workspace-initialization/) to run arbitrary …

    github.com/kcp-dev/kcp Go