Vulnerabilities

TI-2025-29310 CVE-2025-46599 · GHSA-864f-7xjm-2jp2

CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with…

LOW 30

CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations, ReadOnlyPort is set to 10255.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00459 Published 2025-04-25 Fixed in 1.32.4-rc1+k3s, 1.32.4-rc1 CWE-1188

TI-2023-15488 CVE-2023-32187 · GHSA-m4hf-6vgr-75r2

Resource allocation without limits in SUSE k3s

MEDIUM 40

An Allocation of Resources Without Limits or Throttling vulnerability in SUSE k3s allows attackers with access to K3s servers' apiserver/supervisor port (TCP 6443) cause denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00723 Published 2023-09-18 Fixed in v1.24.17+k3s1, v1.25.13+k3s1 +8 CWE-770

Vulnerabilities

Filters

CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with…

Resource allocation without limits in SUSE k3s