{"kind": "product", "path": "vulns/kubernetes", "name": "kubernetes", "product": "kubernetes", "items": [{"id": "CVE-2026-19444", "noindex": false, "published": "2026-09-28T11:38:10.699Z", "modified": "2026-09-28T18:09:01.767Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N", "severity": "medium", "epss": 0.00228, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-19444", "title": "Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes", "description": "A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary in the container is malicious, it can execute arbitrary code and emit unexpected output, allowing an attacker who controls container contents to write files to arbitrary paths on the user's local machine when kubectl cp is invoked, limited only by the system permissions of the local user. This issue only affects kubectl clients running on Windows.", "references": ["https://github.com/kubernetes/kubernetes/issues/141294", "https://github.com/kubernetes/kubernetes/pull/141296", "https://groups.google.com/g/kubernetes-security-announce/c/v_ob5Gf4-eY"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2025-13281", "noindex": false, "published": "2025-12-14T21:27:34.786Z", "modified": "2025-12-15T16:26:59.485Z", "cvss": 5.8, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N", "severity": "medium", "epss": 0.00389, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2025-13281", "title": "Portworx Half-Blind SSRF in kube-controller-manager", "description": "A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).", "references": ["https://github.com/kubernetes/kubernetes/issues/135525", "https://groups.google.com/g/kubernetes-security-announce/c/EORqZg0k1l4/m/TtD-q0v7AgAJ", "http://www.openwall.com/lists/oss-security/2025/12/01/4"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2025-5187", "noindex": false, "published": "2025-08-27T16:20:56.778Z", "modified": "2026-02-26T17:47:59.242Z", "cvss": 6.7, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "severity": "medium", "epss": 0.00574, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2025-5187", "title": "Nodes can delete themselves by adding an OwnerReference", "description": "A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.", "references": ["https://github.com/kubernetes/kubernetes/issues/133471", "https://groups.google.com/g/kubernetes-security-announce/c/znSNY7XCztE", "https://nvd.nist.gov/vuln/detail/CVE-2025-5187"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2025-4563", "noindex": false, "published": "2025-06-23T15:38:42.258Z", "modified": "2025-06-23T15:58:05.106Z", "cvss": 2.7, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "severity": "low", "epss": 0.00827, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2025-4563", "title": "Nodes can bypass dynamic resource allocation authorization checks", "description": "A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicResourceAllocation feature gate is enabled, the controller properly validates resource claim statuses during pod status updates but fails to perform equivalent validation during pod creation. This allows a compromised node to create mirror pods that access unauthorized dynamic resources, potentially leading to privilege escalation.", "references": ["https://groups.google.com/g/kubernetes-security-announce/c/Zv84LMRuvMQ", "https://github.com/kubernetes/kubernetes/issues/132151", "https://nvd.nist.gov/vuln/detail/CVE-2025-4563"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2024-7598", "noindex": false, "published": "2025-03-20T16:52:57.929Z", "modified": "2025-03-20T21:02:37.374Z", "cvss": 3.1, "cvss_vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "severity": "low", "epss": 0.0032, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2024-7598", "title": "Network restriction bypass via race condition during namespace termination", "description": "A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies to be deleted before the pods that they protect. This can lead to a brief period in which the pods are running, but network policies that should apply to connections to and from the pods are not enforced.", "references": ["https://github.com/kubernetes/kubernetes/issues/126587", "https://groups.google.com/g/kubernetes-security-announce/c/67D7UFqiPRc", "http://www.openwall.com/lists/oss-security/2025/03/20/2"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2025-1767", "noindex": false, "published": "2025-03-13T16:40:42.663Z", "modified": "2025-03-17T16:59:37.276Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "severity": "medium", "epss": 0.00703, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2025-1767", "title": "CVE-2025-1767", "description": "This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.", "references": ["https://github.com/kubernetes/kubernetes/pull/130786", "https://groups.google.com/g/kubernetes-security-announce/c/19irihsKg7s", "http://www.openwall.com/lists/oss-security/2025/03/13/9"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2024-9042", "noindex": false, "published": "2025-03-13T16:40:13.895Z", "modified": "2025-03-13T19:24:39.825Z", "cvss": 5.9, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "severity": "medium", "epss": 0.01398, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2024-9042", "title": "CVE-2024-9042", "description": "This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.", "references": ["https://github.com/kubernetes/kubernetes/issues/129654", "https://groups.google.com/g/kubernetes-security-announce/c/9C3vn6aCSVg", "http://www.openwall.com/lists/oss-security/2025/01/16/1"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2025-0426", "noindex": false, "published": "2025-02-13T15:16:13.703Z", "modified": "2025-02-13T17:02:37.167Z", "cvss": 6.2, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00372, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2025-0426", "title": "CVE-2025-0426", "description": "A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.", "references": ["https://github.com/kubernetes/kubernetes/issues/130016", "https://groups.google.com/g/kubernetes-security-announce/c/KiODfu8i6w8", "http://www.openwall.com/lists/oss-security/2025/02/13/1"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2024-10220", "noindex": false, "published": "2024-11-22T16:23:00.535Z", "modified": "2024-11-25T18:22:59.457Z", "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "severity": "high", "epss": 0.03027, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2024-10220", "title": "Arbitrary command execution through gitRepo volume", "description": "The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.", "references": ["https://github.com/kubernetes/kubernetes/issues/128885", "https://groups.google.com/g/kubernetes-security-announce/c/ptNgV5Necko", "http://www.openwall.com/lists/oss-security/2024/11/20/1"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2024-5321", "noindex": false, "published": "2024-07-18T18:15:25.270Z", "modified": "2024-09-13T17:05:30.545Z", "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "severity": "medium", "epss": 0.00312, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2024-5321", "title": "Incorrect permissions on Windows containers logs", "description": "A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\\Users may be able to read container logs and NT AUTHORITY\\Authenticated Users may be able to modify container logs.", "references": ["https://github.com/kubernetes/kubernetes/issues/126161", "https://groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0", "http://www.openwall.com/lists/oss-security/2024/07/17/3"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2024-3177", "noindex": false, "published": "2024-04-22T23:00:39.702Z", "modified": "2024-09-10T20:48:09.780Z", "cvss": 2.7, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "severity": "low", "epss": 0.02224, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2024-3177", "title": "Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin", "description": "A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field pop", "references": ["https://groups.google.com/g/kubernetes-security-announce/c/JxjHf7fkVd8/m/oVCzypyOAQAJ", "https://github.com/kubernetes/kubernetes/issues/124336", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WL54MTLGMTBZZO5PYGEGEBERTMADC4WC/"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2023-5528", "noindex": false, "published": "2023-11-14T20:32:08.411Z", "modified": "2026-02-25T17:20:08.702Z", "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.04251, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2023-5528", "title": "Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation", "description": "A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.", "references": ["https://github.com/kubernetes/kubernetes/issues/121879", "https://groups.google.com/g/kubernetes-security-announce/c/SL_d4NR8pzA", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4XZIX727JIKF5RQW7RVVBLWXBCDIBJA7/"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2022-3172", "noindex": false, "published": "2023-11-03T18:11:53.835Z", "modified": "2025-02-13T16:32:41.378Z", "cvss": 5.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L", "severity": "medium", "epss": 0.02464, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2022-3172", "title": "Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)", "description": "A security issue was discovered in kube-apiserver that allows an \naggregated API server to redirect client traffic to any URL.  This could\n lead to the client performing unexpected actions as well as forwarding \nthe client's API server credentials to third parties.", "references": ["https://github.com/kubernetes/kubernetes/issues/112513", "https://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRak", "https://security.netapp.com/advisory/ntap-20231221-0005/"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2023-3955", "noindex": false, "published": "2023-10-31T20:36:54.352Z", "modified": "2025-02-13T17:03:13.470Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.03998, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2023-3955", "title": "Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation", "description": "A security issue was discovered in Kubernetes where a user\n that can create pods on Windows nodes may be able to escalate to admin \nprivileges on those nodes. Kubernetes clusters are only affected if they\n include Windows nodes.", "references": ["https://github.com/kubernetes/kubernetes/issues/119595", "https://groups.google.com/g/kubernetes-security-announce/c/JrX4bb7d83E", "https://security.netapp.com/advisory/ntap-20231221-0002/"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2023-3676", "noindex": false, "published": "2023-10-31T20:22:53.620Z", "modified": "2025-02-27T20:38:37.768Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.13156, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2023-3676", "title": "Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation", "description": "A security issue was discovered in Kubernetes where a user\n that can create pods on Windows nodes may be able to escalate to admin \nprivileges on those nodes. Kubernetes clusters are only affected if they\n include Windows nodes.", "references": ["https://github.com/kubernetes/kubernetes/issues/119339", "https://groups.google.com/g/kubernetes-security-announce/c/d_fvHZ9a5zc", "https://security.netapp.com/advisory/ntap-20231130-0007/"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2021-25736", "noindex": false, "published": "2023-10-30T02:19:48.916Z", "modified": "2025-06-12T14:42:12.231Z", "cvss": 5.8, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N", "severity": "medium", "epss": 0.00915, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2021-25736", "title": "Windows kube-proxy LoadBalancer contention", "description": "Kube-proxy\n on Windows can unintentionally forward traffic to local processes \nlistening on the same port (“spec.ports[*].port”) as a LoadBalancer \nService when the LoadBalancer controller\n does not set the “status.loadBalancer.ingress[].ip” field. Clusters \nwhere the LoadBalancer controller sets the \n“status.loadBalancer.ingress[].ip” field are unaffected.", "references": ["https://github.com/kubernetes/kubernetes/pull/99958", "https://groups.google.com/g/kubernetes-security-announce/c/lIoOPObO51Q/m/O15LOazPAgAJ", "https://security.netapp.com/advisory/ntap-20231221-0003/"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2023-2728", "noindex": false, "published": "2023-07-03T20:06:11.796Z", "modified": "2025-02-13T16:45:20.353Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "severity": "medium", "epss": 0.02157, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2023-2728", "title": "Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin", "description": "Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the `kubernetes.io/enforce-mountable-secrets` annotation are used together with ephemeral containers.", "references": ["https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8", "https://github.com/kubernetes/kubernetes/issues/118640", "http://www.openwall.com/lists/oss-security/2023/07/06/3"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2023-2727", "noindex": false, "published": "2023-07-03T20:05:04.329Z", "modified": "2025-02-13T16:45:04.559Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "severity": "medium", "epss": 0.01134, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2023-2727", "title": "Bypassing policies imposed by the ImagePolicyWebhook admission plugin", "description": "Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.", "references": ["https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8", "https://github.com/kubernetes/kubernetes/issues/118640", "http://www.openwall.com/lists/oss-security/2023/07/06/2"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2023-2431", "noindex": false, "published": "2023-06-16T07:08:33.476Z", "modified": "2025-02-13T16:44:13.942Z", "cvss": 3.4, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "severity": "low", "epss": 0.00257, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2023-2431", "title": "Bypass of seccomp profile enforcement", "description": "A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.", "references": ["https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10", "https://github.com/kubernetes/kubernetes/issues/118690", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}, {"id": "CVE-2021-25749", "noindex": false, "published": "2023-05-24T00:00:00.000Z", "modified": "2025-01-16T21:21:12.621Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00211, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2021-25749", "title": "runAsNonRoot logic bypass for Windows containers", "description": "Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.", "references": ["https://groups.google.com/g/kubernetes-security-announce/c/qqTZgulISzA", "https://nvd.nist.gov/vuln/detail/CVE-2021-25749"], "fixes": [], "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}]}], "total": 61, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 4, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "kubernetes", "path": "vulns/kubernetes", "ecosystem": ""}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": ["1.32.2", "1.32.0", "1.31.6", "1.31.0", "1.30.10", "1.30.3", "1.30.0", "1.29.7", "1.29.0", "1.28.12", "1.28.0", "1.27.16"], "stats": {"recent": 1, "kev": 0}, "lastmod": "2026-09-28T18:09:01.767Z", "early_advisories": [], "license": "Подборку PatchFirst и наши дополнения (приоритеты, ранние предупреждения, тексты, сводки и агрегаты) можно свободно использовать для собственных целей, включая внутренние задачи бизнеса. Перепродажа, коммерческое распространение и массовое зеркалирование этой подборки или дополнений допускаются только по письменному соглашению с оператором. При любом использовании или публикации подборки или наших дополнений указывайте PatchFirst (https://ru.patchfirst.dev/vulns/) с этой ссылкой на страницу ленты своего региона. Исходные записи открытых источников остаются под их лицензиями и условиями. Эти условия не ограничивают ваши права на исходные данные, которые можно получить у источников напрямую.", "terms_url": "https://ru.patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://ru.patchfirst.dev/vulns/"}, "source_changes": "PatchFirst отбирает, нормализует и объединяет записи; могут добавляться сводки и переводы. Новости указываются ссылкой на первоисточник в самой записи.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Лицензии исходных баз различаются; см. каталог источников."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Оценки доступны свободно; запрашивается указание источника (FIRST EPSS, оценки подготовлены Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}