Nuclio

8 CVEs in 1 Nuclio product, including Nuclio. Newest: CVE-2026-79756 (2026-09-02). Severity, EPSS and public exploits for each.

Nuclio products with known CVEs

ProductCVEs
Nuclio8
Nuclio CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-797562026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the n…
CVE-2026-79755High8.02026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespa…
CVE-2026-797542026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline do…
CVE-2026-52833High8.02026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio's Java runtime generates a build.gradle file durin…
CVE-2026-52832Medium4.92026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without auth…
CVE-2026-52831High8.02026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for…
CVE-2026-45730High8.32026-09-02Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnerability in Nuclio Dashboard's project ma…
CVE-2026-29042Critical9.82026-03-06Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.15.20, the Nuclio Shell Runtime component contains a command in…