Skip to content
OpenAdvisories

Package · Go

github.com/metal3-io/cluster-api-provider-metal3

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.5
    GHSA-rf84-wr5g-m3rp

    CAPM3 vulnerable to Cross-Namespace resource access

    ## Summary CAPM3 is Metal3's Cluster API (CAPI) provider for baremetal provisioning in Kubernetes. Multiple cross-namespace access control vulnerabilities in Cluster API Provider Metal3 allow users with permissions to create or modify CAPM3 resources in one n…

    github.com/metal3-io/cluster-api-provider-metal3 Go