Skip to content
OpenAdvisories

Vendor

clastix

5 known vulnerabilities.

Products

kamaji 3 capsule-proxy 1 capsule 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-62845

    Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers

    Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without es…

    clastix kamaji