CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: vault-k8s, falco-exporter, flyte, aws-node-termination-handler-fips, yunikorn-k8shim-fips, secrets-store-csi-driver-provider-aws, kbld-fips, kube-oidc-proxy, prometheus-postgres-exporter, nsc, go-md2man, smarter-device-manager-fips,...

CVE-2025-58063 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, cloudflared, k8sgateway...

GHSA-93MF-426M-G6X9 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, cloudflared, k8sgateway...

CVE-2025-58063 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, k8sgateway-fips, eks-distro, eks-distro-fips, cloudflared, k8sgateway, juicefs...

GHSA-93MF-426M-G6X9 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, k8sgateway-fips, eks-distro, eks-distro-fips, cloudflared, k8sgateway, juicefs...

CVE-2023-28452 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-HFMW-7G3M-GJ6Q vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2022-2837 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-GV9J-4W24-Q7VX vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-H92Q-FGPP-QHRQ vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2022-2835 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-CH7V-37XG-75PH vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2023-30464 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-H828-V5PV-33QX vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2023-28452 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-HFMW-7G3M-GJ6Q vulnerabilities

Vulnerabilities for packages: juicefs...

CVE-2023-30464 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-H92Q-FGPP-QHRQ vulnerabilities

Vulnerabilities for packages: juicefs...

OS Command Injection

github.com/fluid-cloudnative/fluid is vulnerable to OS Command Injection. The vulnerability is due to insufficient input validation within the JuicefsRuntime, allowing an authenticated user with the authority to create or update the K8s CRD Dataset/JuicefsRuntime to execute arbitrary OS commands...

Fluid vulnerable to OS Command Injection for Fluid Users with JuicefsRuntime

Impact OS command injection vulnerability within the Fluid project's JuicefsRuntime can potentially allow an authenticated user, who has the authority to create or update the K8s CRD Dataset/JuicefsRuntime, to execute arbitrary OS commands within the juicefs related containers. This could lead to...