Vendor

    Cncf

    5 known vulnerabilities in products by Cncf, 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cncf
    HighCVE-2019-9946

    Kubernetes: security vulnerability

    also in 2 other products

    		7.5
    CriticalCVE-2023-38495

    Crossplane vulnerable to possible image tampering from missing image validation for Packages

    also in 2 other products

    		8.4
    HighCVE-2021-27098

    Cncf Spire: security vulnerability

    also in 1 other product

    		8.1
    MediumCVE-2021-27099

    Cncf Spire: security vulnerability

    		6.8
    LowCVE-2023-37900

    Crossplane vulnerable to denial of service from large image

    also in 2 other products

    		3.4