[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fde51gJuo8yTBvIC7k-PzGsWBCH_sPQWhOouogC3Tn2g":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":111,"kevVulnerabilities":173,"topProductsByCves":174,"seoMetadata":185,"meta":194},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":110},17093,"kubernetes",20,94,0,1160,"2025-10-22","k",[16,20,26,32,38,43,48,54,58,62,67,72,77,82,87,91,96,100,103,107],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},97033,419,57,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},97023,"cri-o",190,10,"2024-06-12",{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},97030,"ingress-nginx",119,8,"2023-10-25",{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},97035,"minikube",115,3,"2023-05-24",{"id":39,"product_name":40,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":42},97029,"image_builder",2,"2024-10-15",{"id":44,"product_name":45,"version_count":46,"cve_count":41,"kev_count":11,"last_cve_update":47},97031,"java",23,"2021-10-11",{"id":49,"product_name":50,"version_count":51,"cve_count":52,"kev_count":11,"last_cve_update":53},97027,"external-resizer",4,1,"2019-12-05",{"id":55,"product_name":56,"version_count":57,"cve_count":52,"kev_count":11,"last_cve_update":53},97028,"external-snapshotter",13,{"id":59,"product_name":60,"version_count":11,"cve_count":52,"kev_count":11,"last_cve_update":61},97032,"kube-apiserver","2023-09-24",{"id":63,"product_name":64,"version_count":65,"cve_count":52,"kev_count":11,"last_cve_update":66},97034,"kube-state-metrics",19,"2019-11-05",{"id":68,"product_name":69,"version_count":70,"cve_count":52,"kev_count":11,"last_cve_update":71},97036,"nginx_ingress_controller",26,"2020-01-14",{"id":73,"product_name":74,"version_count":75,"cve_count":52,"kev_count":11,"last_cve_update":76},97037,"operations",95,"2023-10-12",{"id":78,"product_name":79,"version_count":80,"cve_count":52,"kev_count":11,"last_cve_update":81},97038,"secrets-store-csi-driver",40,"2023-06-07",{"id":83,"product_name":84,"version_count":85,"cve_count":52,"kev_count":11,"last_cve_update":86},97020,"apiserver",11,"2023-11-03",{"id":88,"product_name":89,"version_count":65,"cve_count":52,"kev_count":11,"last_cve_update":90},97039,"secrets_store_csi_driver","2021-01-21",{"id":92,"product_name":93,"version_count":94,"cve_count":52,"kev_count":11,"last_cve_update":95},97021,"aws-iam-authenticator",14,"2022-07-12",{"id":97,"product_name":98,"version_count":99,"cve_count":52,"kev_count":11,"last_cve_update":90},97022,"container_storage_interface_snapshotter",21,{"id":101,"product_name":102,"version_count":85,"cve_count":52,"kev_count":11,"last_cve_update":86},97024,"csi_proxy",{"id":104,"product_name":105,"version_count":11,"cve_count":52,"kev_count":11,"last_cve_update":106},97025,"dashboard","2019-01-03",{"id":108,"product_name":109,"version_count":99,"cve_count":52,"kev_count":11,"last_cve_update":53},97026,"external-provisioner","Kubernetes is a technology vendor with 20 tracked products and 94 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[112,121,129,134,139,144,150,157,162,168],{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":117,"severity":118,"isKev":119,"epssScore":120},"CVE-2018-1002105","In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.","2018-12-05",9.8,"v3.0","Critical",false,0.86978,{"cveId":122,"description":123,"publishedDate":124,"cvssScore":125,"cvssVersion":126,"severity":127,"isKev":119,"epssScore":128},"CVE-2019-11248","The debugging endpoint \u002Fdebug\u002Fpprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration.","2019-08-29",8.2,"v3.1","High",0.7506,{"cveId":130,"description":131,"publishedDate":106,"cvssScore":132,"cvssVersion":117,"severity":127,"isKev":119,"epssScore":133},"CVE-2018-18264","Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster.",7.5,0.70372,{"cveId":135,"description":136,"publishedDate":31,"cvssScore":137,"cvssVersion":126,"severity":127,"isKev":119,"epssScore":138},"CVE-2023-5044","Code injection via nginx.ingress.kubernetes.io\u002Fpermanent-redirect annotation.",7.6,0.56605,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":132,"cvssVersion":126,"severity":127,"isKev":119,"epssScore":143},"CVE-2019-11253","Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.","2019-10-17",0.25939,{"cveId":145,"description":146,"publishedDate":147,"cvssScore":148,"cvssVersion":126,"severity":127,"isKev":119,"epssScore":149},"CVE-2022-0811","A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.","2022-03-16",8.8,0.19046,{"cveId":151,"description":152,"publishedDate":153,"cvssScore":154,"cvssVersion":126,"severity":155,"isKev":119,"epssScore":156},"CVE-2019-1002100","In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type \"json-patch\" (e.g. `kubectl patch --type json` or `\"Content-Type: application\u002Fjson-patch+json\"`) that consumes excessive resources while processing, causing a Denial of Service on the API Server.","2019-04-01",6.5,"Medium",0.16934,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":148,"cvssVersion":126,"severity":127,"isKev":119,"epssScore":161},"CVE-2023-3676","A security issue was discovered in Kubernetes where a user\n that can create pods on Windows nodes may be able to escalate to admin \nprivileges on those nodes. Kubernetes clusters are only affected if they\n include Windows nodes.","2023-10-31",0.13156,{"cveId":163,"description":164,"publishedDate":165,"cvssScore":166,"cvssVersion":117,"severity":118,"isKev":119,"epssScore":167},"CVE-2017-1002101","In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files\u002Fdirectories outside of the volume, including the host's filesystem.","2018-03-13",9.6,0.1292,{"cveId":169,"description":170,"publishedDate":153,"cvssScore":171,"cvssVersion":117,"severity":155,"isKev":119,"epssScore":172},"CVE-2019-1002101","The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. The untar function can both create and follow symbolic links. The issue is resolved in kubectl v1.11.9, v1.12.7, v1.13.5, and v1.14.0.",5.5,0.12802,[],[175,176,177,178,179,180,181,182,183,184],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":42},{"id":44,"product_name":45,"version_count":46,"cve_count":41,"kev_count":11,"last_cve_update":47},{"id":49,"product_name":50,"version_count":51,"cve_count":52,"kev_count":11,"last_cve_update":53},{"id":55,"product_name":56,"version_count":57,"cve_count":52,"kev_count":11,"last_cve_update":53},{"id":59,"product_name":60,"version_count":11,"cve_count":52,"kev_count":11,"last_cve_update":61},{"id":63,"product_name":64,"version_count":65,"cve_count":52,"kev_count":11,"last_cve_update":66},{"title":186,"metaDescription":187,"keywords":188,"structuredData":189},"Kubernetes - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Kubernetes covering 20 products with 94 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Kubernetes vulnerabilities, Kubernetes security, Kubernetes CVE, Kubernetes threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":190,"@type":191,"name":192,"description":187,"url":193},"https:\u002F\u002Fschema.org","Organization","Kubernetes","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fkubernetes",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":195,"apiVersion":196},"2026-10-17T11:34:49.005Z","3.0"]