Skip to content
OpenAdvisories

Vendor

kubernetes-sigs

1 known vulnerabilities.

Products

headlamp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2025-53542

    Kubernetes Headlamp Allows Arbitrary Command Injection in macOS Process headlamp@codeSign

    Headlamp is an extensible Kubernetes web UI. A command injection vulnerability was discovered in the codeSign.js script used in the macOS packaging workflow of the Kubernetes Headlamp project. This issue arises due to the improper use of Node.js's execSync() …

    kubernetes-sigs headlamp