CVE security advisories and vulnerability history for k8s.io/kubernetes by k8s.io.
50
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
2
Public exploits
PoC or exploit code
6.3
Avg CVSS
2015–2025
Last updated
Overview
k8s.io k8s.io/kubernetes has 50 published CVE records since 2015, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting k8s.io k8s.io/kubernetes, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of k8s.io k8s.io/kubernetes's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical2
High13
Medium28
Low7
In CISA’s Known Exploited Vulnerabilities catalog
0
None of k8s.io k8s.io/kubernetes's CVEs are currently listed in CISA's KEV catalog.
Public exploits
2
2 of k8s.io k8s.io/kubernetes's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every k8s.io k8s.io/kubernetes version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
< 1.24.152 CVEs
< 1.24.172 CVEs
<= 1.22.22 CVEs
1.17.0 <= v < 1.17.92 CVEs
1.22.0 <= v < 1.22.162 CVEs
1.23.0 <= v < 1.23.142 CVEs
1.24.0 <= v < 1.24.82 CVEs
1.25.0 <= v < 1.25.112 CVEs
1.25.0 <= v < 1.25.132 CVEs
1.25.0 <= v < 1.25.42 CVEs
1.26.0 <= v < 1.26.62 CVEs
Common weakness types
The CWE weakness categories most often found in k8s.io k8s.io/kubernetes CVEs. Follow any weakness for its full explanation.
Common questions about k8s.io k8s.io/kubernetes vulnerabilities.
How many CVEs does k8s.io k8s.io/kubernetes have?
k8s.io k8s.io/kubernetes has 50 published CVE records since 2015.
How many k8s.io k8s.io/kubernetes CVEs are in CISA KEV?
None of k8s.io k8s.io/kubernetes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for k8s.io k8s.io/kubernetes vulnerabilities?
Yes — 2 of k8s.io k8s.io/kubernetes's CVEs have a known public exploit.
Which versions of k8s.io k8s.io/kubernetes are affected?
224 distinct k8s.io k8s.io/kubernetes versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in k8s.io k8s.io/kubernetes CVEs?
k8s.io k8s.io/kubernetes's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-532 (Insertion of Sensitive Information into Log File), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-400 (Uncontrolled Resource Consumption).
How many critical k8s.io k8s.io/kubernetes vulnerabilities are there?
k8s.io k8s.io/kubernetes has 2 critical and 13 high-severity CVEs.
What is the average severity of k8s.io k8s.io/kubernetes CVEs?
The average CVSS base score across k8s.io k8s.io/kubernetes's scored CVEs is 6.3.
