Skip to content
OpenAdvisories

Package · npm

pepr

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • None 0.0
    CVE-2026-23634

    Pepr Overly Permissive RBAC ClusterRole in Admin Mode

    Pepr is a type safe K8s middleware. Prior to 1.0.5 , Pepr defaults to a cluster-admin RBAC configuration and does not explicitly force or enforce least-privilege guidance for module authors. The default behavior exists to make the “getting started” experience…

    defenseunicorns pepr pepr npm