Vendors / devspace Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now devspace records in CISA KEV No devspace vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02716 · Published 2020-07-23 · Fixed in 4.14.0 CWE-306
Priority MEDIUM 41
DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream.
CVSS 4.0 HIGH 8.7· Network · No auth · User interaction · EPSS 0.00651 · Published 2026-09-14 · No fix listed CWE-22
Priority LOW 35
DevSpace is a client-only developer tool for cloud-native development with Kubernetes.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00152 · Published 2026-05-14 · Fixed in 6.3.21 CWE-200
Open these records in search → All records by CVSS severity
1 2 0 0 0
