Devspace

3 CVEs in 1 Devspace product, including Devspace. Newest: CVE-2026-91200 (2026-09-14). Severity, EPSS and public exploits for each.

Devspace products with known CVEs

ProductCVEs
Devspace3
Devspace CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-91200High8.82026-09-14DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can…
CVE-2026-42283High7.72026-05-14DevSpace is a client-only developer tool for cloud-native development with Kubernetes. Prior to 6.3.21, DevSpace's UI server WebSocket accepts connections from…
CVE-2020-15391Critical9.82020-07-23The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. T…