Skip to content
OpenAdvisories

Package · Go

github.com/vmware-tanzu/velero

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-32637

    Velero vulnerable to file path traversal when extracting from backup's tarball

    Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the backup object-storage backend can upload a malicious backup tarball containing parent-…

    velero-io velero github.com/vmware-tanzu/velero Go