TI-2026-61923 CVE-2026-91200 · GHSA-67r3-rpfh-8h3r
DevSpace through 6.3.21 Path Traversal via tar extraction
Priority MEDIUM 41
DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream.
Vulnerabilities
3 records
TI-2026-30594 CVE-2026-42283 · GHSA-hqwm-7x7x-8379
DevSpace UI Server WebSocket CheckOrigin does not validate source
Priority LOW 35
DevSpace is a client-only developer tool for cloud-native development with Kubernetes.
TI-2020-12138 CVE-2020-15391 · GHSA-6h8c-gw33-cjm2
The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a…
Priority MEDIUM 47
The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol.