kubernetes-sigs

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

kubernetes-sigs records in CISA KEV

No kubernetes-sigs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Image Builder 2 records MEDIUM

Records

3 records

TI-2024-08803 CVE-2024-9486 · GHSA-9224-ggvw-wh7v

VM images built with Image Builder and Proxmox provider use default credentials

MEDIUM 53

A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02208 Published 2024-10-15 Fixed in 0.1.38 CWE-798

TI-2024-08901 CVE-2024-9594 · GHSA-8jpg-62jc-hwhr

VM images built with Image Builder with some providers use default credentials during builds

MEDIUM 41

A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01728 Published 2024-10-15 Fixed in 0.1.38 CWE-798

TI-2025-33486 CVE-2025-53542

Kubernetes Headlamp Allows Arbitrary Command Injection in macOS Process headlamp@codeSign

LOW 37

Headlamp is an extensible Kubernetes web UI.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00628 Published 2025-07-10 Fixed in 0.31.1 CWE-78

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0