Skip to content
OpenAdvisories

Package · Go

github.com/openkruise/kruise

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • None 0.0
    CVE-2026-24005

    OpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Field

    Kruise provides automated management of large-scale applications on Kubernetes. Prior to versions 1.8.3 and 1.7.5, PodProbeMarker allows defining custom probes with TCPSocket or HTTPGet handlers. The webhook validation does not restrict the Host field in thes…

    OpenKruise kruise github.com/openkruise/kruise Go
  • Medium 6.5
    CVE-2023-30617

    Leverage the kruise-daemon pod to list all secrets in the entire cluster

    Kruise provides automated management of large-scale applications on Kubernetes. Starting in version 0.8.0 and prior to versions 1.3.1, 1.4.1, and 1.5.2, an attacker who has gained root privilege of the node that kruise-daemon run can leverage the kruise-daemo…

    OpenKruise kruise github.com/openkruise/kruise Go