Cloudark Kubeplus
2 CVEs affecting Cloudark Kubeplus. Latest disclosed: 2026-04-13. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-29955 | High | 8.8 | 2026-04-13 | The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. The component uses `subprocess.Popen()` w… |
CVE-2026-29954 | High | 7.6 | 2026-03-30 | In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of ResourceComposition… |