How many CVEs does kubernetes-sigs have?

kubernetes-sigs has 15 published CVE records since 2021, including 7 in the last two years.

How many kubernetes-sigs CVEs are in CISA KEV?

None of kubernetes-sigs's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which kubernetes-sigs products have the most CVEs?

The kubernetes-sigs products with the most published CVEs are aws-efs-csi-driver, secrets-store-csi-driver, github.com/kubernetes-sigs/aws-efs-csi-driver, image builder, image-builder.

What are the most common weakness types in kubernetes-sigs CVEs?

kubernetes-sigs's CVEs most often map to these CWE weakness types: CWE-532 (Insertion of Sensitive Information into Log File), CWE-24 (Path Traversal: '../filedir'), CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')), CWE-798 (Use of Hard-coded Credentials).

Are there public exploits for kubernetes-sigs vulnerabilities?

Yes — 1 of kubernetes-sigs's CVEs have a known public exploit.

How many critical kubernetes-sigs vulnerabilities are there?

kubernetes-sigs has 1 critical and 2 high-severity CVEs.

What is the average severity of kubernetes-sigs CVEs?

The average CVSS base score across kubernetes-sigs's scored CVEs is 6.2.

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Home
Vendors
Kubernetessigs

RadicalNotion.AI

We do not sell or share your personal information.

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Home
Vendors
Kubernetessigs

kubernetes-sigs Vulnerabilities: CVEs, CISA KEV & Security Advisories

15 CVEs

kubernetes-sigs Vulnerabilities

Name: kubernetes-sigs vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for kubernetes-sigs.

Total CVEs

Published

In CISA KEV

Exploited in the wild

Public exploits

PoC or exploit code

6.2

Avg CVSS

2021–2026

Overview

kubernetes-sigs has 15 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.

Security scorecard

A quick read on kubernetes-sigs's vulnerability posture, as a share of its 15 published CVEs.

Average CVSS: 6.2
Critical / high: 20%
Actively exploited (KEV): 0%
Public exploit available: 7%
Patch available: 100%

Severity and exploitation

How the CVSS severity of kubernetes-sigs's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium11

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of kubernetes-sigs's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of kubernetes-sigs's CVEs has a known public exploit available.

Most affected products

The kubernetes-sigs products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

aws-efs-csi-driver4 CVEs
secrets-store-csi-driver3 CVEs
github.com/kubernetes-sigs/aws-efs-csi-driver2 CVEs
image builder2 CVEs
image-builder2 CVEs
github.com/kubernetes-sigs/image-builder2 CVEs

Common weakness types

The CWE weakness categories most often found in kubernetes-sigs CVEs. Follow any weakness for its full explanation.

CWE-532Insertion of Sensitive Information into Log File3 CVEs
CWE-24Path Traversal: '../filedir'2 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')2 CVEs
CWE-798Use of Hard-coded Credentials2 CVEs
CWE-441Unintended Proxy or Intermediary ('Confused Deputy')1 CVE

CNAs that assign these CVEs

The CVE Numbering Authorities that publish kubernetes-sigs CVE records.

kubernetes8 CVEs
AMZN4 CVEs
GitHub_M2 CVEs
mitre1 CVEs

Disclosure activity by year

How many kubernetes-sigs CVEs were published each year.

2021

2022

2023

2024

2025

2026

Latest kubernetes-sigs CVEs

The most recently disclosed vulnerabilities affecting kubernetes-sigs.

AWS EFS CSI Driver Mount Option Injection via mounttargetipmap
CWE-88
Medium · CVSS 6.9
EPSS 0.4%2026-10-01
Unverified access point ownership in Amazon EFS CSI Driver
CWE-283
Medium · CVSS 5.1
EPSS 0.4%2026-09-04
Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller
CWE-653
Medium · CVSS 5.8
EPSS 0.6%2026-07-14
AWS EFS CSI Driver Mount Option Injection

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about kubernetes-sigs vulnerabilities.

How many CVEs does kubernetes-sigs have?: kubernetes-sigs has 15 published CVE records since 2021, including 7 in the last two years.
How many kubernetes-sigs CVEs are in CISA KEV?: None of kubernetes-sigs's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which kubernetes-sigs products have the most CVEs?: The kubernetes-sigs products with the most published CVEs are aws-efs-csi-driver, secrets-store-csi-driver, github.com/kubernetes-sigs/aws-efs-csi-driver, image builder, image-builder.
What are the most common weakness types in kubernetes-sigs CVEs?: kubernetes-sigs's CVEs most often map to these CWE weakness types: CWE-532 (Insertion of Sensitive Information into Log File), CWE-24 (Path Traversal: '../filedir'), CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')), CWE-798 (Use of Hard-coded Credentials).
Are there public exploits for kubernetes-sigs vulnerabilities?: Yes — 1 of kubernetes-sigs's CVEs have a known public exploit.
How many critical kubernetes-sigs vulnerabilities are there?: kubernetes-sigs has 1 critical and 2 high-severity CVEs.
What is the average severity of kubernetes-sigs CVEs?: The average CVSS base score across kubernetes-sigs's scored CVEs is 6.2.