Vulnerabilities

TI-2026-37939 CVE-2026-52831 · GHSA-v5px-423j-pf7p

Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE

LOW 38

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00534 Published 2026-09-02 Fixed in 1.16.4, 0.0.0-20260601075854-3356b86a8bfa CWE-78

TI-2026-55235 CVE-2026-79756

MEDIUM 54

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.07523 Published 2026-09-02 Fixed in 1.17.4 CWE-78

TI-2026-55234 CVE-2026-79755

HIGH 70

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00666 Published 2026-09-02 Fixed in 1.17.4 CWE-78

TI-2026-55233 CVE-2026-79754

MEDIUM 64

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00715 Published 2026-09-02 Fixed in 1.17.2 CWE-77

TI-2026-37941 CVE-2026-52833 · GHSA-3v79-m2cg-89ww

HIGH 70

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00552 Published 2026-09-02 Fixed in 1.16.5 CWE-94

TI-2026-37940 CVE-2026-52832 · GHSA-wpcj-rmv4-86qg

MEDIUM 56

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00557 Published 2026-09-02 Fixed in 1.16.5 CWE-22

TI-2026-33468 CVE-2026-45730 · GHSA-m8xg-8xg9-mxhm

HIGH 69

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00479 Published 2026-09-02 Fixed in 1.16.0, 0.0.0-20260513101907-1915cd26d514 CWE-862