Skip to content
OpenAdvisories

Vendor

Kubernetes

107 known vulnerabilities.

Products

Kubernetes 54 ingress-nginx 18 Kubelet 7 Kubernetes ingress-nginx 4 Minikube 3 Image Builder 3 Kubernetes Java Client 2 Kubernetes Secrets Store CSI Driver 2 kube-apiserver 2 kubernetes-client/java 1 azure-file-csi-driver 1 k8s.gcr.io/defaultbackend 1 kubernetes-csi external-provisioner 1 kubernetes-csi external-snapshotter 1 kubernetes-csi external-resizer 1 aws-iam-authenticator 1 kops 1 secrets-store-csi-driver 1 Kubernetes CSharp Client 1 CSI Driver for NFS 1 csi-proxy 1 secrets-store-sync-controller 1 CSI Snapshotter 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-1974 Public exploit Scanner template EPSS 99%

    ingress-nginx admission controller RCE escalation

    A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secret…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • Critical 9.8
    CVE-2024-9486

    VM images built with Image Builder and Proxmox provider use default credentials

    A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials, and nod…

    Kubernetes Image Builder github.com/kubernetes-sigs/image-builder Go
  • Critical 9.8
    CVE-2023-1174

    [minikube] Network Port exposure in minikube running on macOS using Docker driver

    This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.

    Kubernetes Minikube
  • Critical 9.8
    CVE-2018-1002105 Public exploit EPSS 87%

    Privilege Escalation in Kubernetes

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backe…

    Kubernetes Kubernetes kubernetes github.com/kubernetes/kubernetes Debian Go