Lucene search
+L

8 matches found

osv_go
osv_go
•added 2026/06/25 6:26 p.m.•23 views

GO-2026-5068 Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode in github.com/inspektor-gadget/inspektor-gadget

Inspektor Gadget uses unsanitized ANSI Escape Sequences In columns Output Mode in github.com/inspektor-gadget/inspektor-gadget...

9.8CVSS8.4AI score0.00797EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2026/04/22 6:50 p.m.•44 views

Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

Description String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences. Therefore, a maliciously forged – partially or completely – event payload, coming from an observed container, might inject the...

9.8CVSS8.4AI score0.00797EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2026/04/22 6:50 p.m.•18 views

EUVD-2026-6695

Inspektor Gadget uses unsanitized ANSI Escape Sequences In columns Output Mode...

9.8CVSS8.5AI score0.00797EPSS
SaveExploits1References4
osv_ghsa
osv_ghsa
•added 2026/04/22 6:50 p.m.•24 views

GHSA-34R5-6J7W-235F Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

Description String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences. Therefore, a maliciously forged – partially or completely – event payload, coming from an observed container, might inject the...

6.9CVSS8.4AI score0.00797EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2026/02/14 12:23 a.m.•19 views

SUSE CVE-2026-25996

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

9.8CVSS8.3AI score0.00797EPSS
SaveExploits1References3
NVD
NVD
•added 2026/02/12 9:16 p.m.•22 views

CVE-2026-25996

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

9.8CVSS0.00797EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/02/12 8:06 p.m.•49 views

CVE-2026-25996 Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

6.9CVSS0.00797EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/12 12:00 a.m.•9 views

CVE-2026-25996: Improper Neutralization of Escape, Meta, or Control Sequences

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

9.8CVSS8.4AI score0.00797EPSS
SaveExploits1References1
Rows per page
Query Builder