devspace

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

devspace records in CISA KEV

No devspace vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Devspace 2 records MEDIUM

Records

2 records in Devspace · all components

TI-2020-12138 CVE-2020-15391 · GHSA-6h8c-gw33-cjm2

The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a…

MEDIUM 47

The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02716 Published 2020-07-23 Fixed in 4.14.0 CWE-306

TI-2026-30594 CVE-2026-42283 · GHSA-hqwm-7x7x-8379

DevSpace UI Server WebSocket CheckOrigin does not validate source

LOW 35

DevSpace is a client-only developer tool for cloud-native development with Kubernetes.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00152 Published 2026-05-14 Fixed in 6.3.21 CWE-200

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0