Skip to content
OpenAdvisories

Vendor

kubesphere

2 known vulnerabilities.

Products

KubeSphere 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-91923

    KubeSphere through 4.1.3 SSRF via git credential verification endpoint

    KubeSphere through 4.1.3 contains a server-side request forgery vulnerability in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allowlist restrictions. Authenticated attackers can supply arbitrary URLs to reach …

    kubesphere KubeSphere