CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor archive
2 CVEs tagged to vendor cloudark — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.
The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. The component uses `subprocess.Popen()` with `shell=True` par…
In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of ResourceComposition resources. The fiel…