Skip to content
OpenAdvisories

Package · Go

github.com/kubernetes-sigs/image-builder

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    CVE-2024-9594

    VM images built with Image Builder with some providers use default credentials during builds

    A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root access. The c…

    Kubernetes Image Builder github.com/kubernetes-sigs/image-builder Go
  • Critical 9.8
    CVE-2024-9486

    VM images built with Image Builder and Proxmox provider use default credentials

    A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials, and nod…

    Kubernetes Image Builder github.com/kubernetes-sigs/image-builder Go