Devtron-Labs Devtron
3 CVEs affecting Devtron-Labs Devtron. Latest disclosed: 2026-08-31. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82882 | High | 8.8 | 2026-08-31 | Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to retrieve admin… |
CVE-2026-25538 | High | 8.8 | 2026-02-04 | Devtron is an open source tool integration platform for Kubernetes. In version 2.0.0 and prior, a vulnerability exists in Devtron's Attributes API interface, a… |
CVE-2024-45794 | High | 8.3 | 2024-11-07 | devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and expl… |