Lucene search
K

7 matches found

OSV
OSV
added 2026/04/22 6:50 p.m.2 views

GHSA-34R5-6J7W-235F Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

Description String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences. Therefore, a maliciously forged – partially or completely – event payload, coming from an observed container, might inject the...

6.9CVSS5.9AI score0.00029EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2026/04/22 6:50 p.m.6 views

Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

Description String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences. Therefore, a maliciously forged – partially or completely – event payload, coming from an observed container, might inject the...

9.8CVSS5.9AI score0.00029EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2026/04/22 6:50 p.m.1 views

EUVD-2026-6695

Inspektor Gadget uses unsanitized ANSI Escape Sequences In columns Output Mode...

9.8CVSS5.8AI score0.00029EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2026/02/14 12:23 a.m.3 views

SUSE CVE-2026-25996

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

9.8CVSS5.6AI score0.00029EPSS
Exploits1References3
NVD
NVD
added 2026/02/12 9:16 p.m.3 views

CVE-2026-25996

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

9.8CVSS0.00029EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/02/12 8:6 p.m.25 views

CVE-2026-25996 Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

6.9CVSS0.00029EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/02/12 8:6 p.m.4 views

CVE-2026-25996

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

6.9CVSS5.6AI score0.00029EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder