eksctl vulnerabilities

Known vulnerabilities in the eksctl package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Arbitrary Code Injection	<0.211.0-r0
L GHSA-557j-xg8c-q2mm	<0.211.0-r0
L GHSA-4hfp-h4cw-hj8p	<0.207.0-r3
L GHSA-5xqw-8hwv-wg92	<0.207.0-r3
L Stack-based Buffer Overflow	<0.207.0-r3
L Allocation of Resources Without Limits or Throttling	<0.207.0-r3
L CVE-2025-22872	<0.207.0-r2
L GHSA-vvgc-356p-c3xw	<0.207.0-r2
L Asymmetric Resource Consumption (Amplification)	<0.205.0-r5
L GHSA-mh63-6h87-95cp	<0.205.0-r5
M Open Redirect	<0.205.0-r4
L GHSA-33c5-9fx5-fvjm	<0.205.0-r4
L GHSA-265r-hfxg-fhmg	<0.205.0-r4
L Integer Overflow or Wraparound	<0.205.0-r4
L CVE-2025-22870	<0.205.0-r3
L GHSA-qxp5-gwg8-xv66	<0.205.0-r3
L CVE-2025-22868	<0.205.0-r2
L CVE-2025-22869	<0.205.0-r1
L GHSA-3whm-j4xm-rv8x	<0.203.0-r1
L CVE-2025-22866	<0.203.0-r1
L GHSA-w32m-9786-jp63	<0.199.0-r1
L CVE-2024-45338	<0.199.0-r1
L GHSA-v778-237x-gjrc	<0.198.0-r1
L CVE-2024-45337	<0.198.0-r1
L GHSA-8xfx-rj4p-23jm	<0.190.0-r1
L CVE-2024-34155	<0.190.0-r1
L CVE-2024-34158	<0.190.0-r1
L GHSA-j7vj-rw65-4v26	<0.190.0-r1
L CVE-2024-34156	<0.190.0-r1
L GHSA-crqm-pwhx-j97f	<0.190.0-r1
L CVE-2024-41110	<0.188.0-r0
L GHSA-v23v-6jw2-98fq	<0.188.0-r0
L GHSA-hw49-2p59-3mhj	<0.183.0-r1
L CVE-2024-24791	<0.183.0-r1
L CVE-2024-24787	<0.176.0-r1
L GHSA-2jwv-jmq4-4j3r	<0.176.0-r1
L CVE-2024-24788	<0.176.0-r1
L GHSA-5fq7-4mxc-535h	<0.176.0-r1
L CVE-2023-45288	<0.175.0-r1
L GHSA-4v7x-pqxf-cx7m	<0.175.0-r1
L GHSA-xw73-rw38-6vjc	<0.174.0-r1
H Origin Validation Error	<0.174.0-r1
L CVE-2024-24786	<0.173.0-r2
L GHSA-8r3f-844c-mc37	<0.173.0-r2
L CVE-2024-24783	<0.173.0-r1
L CVE-2023-45290	<0.173.0-r1
L GHSA-3q2c-pvp5-3cqp	<0.173.0-r1
L GHSA-rr6r-cfgf-gc6h	<0.173.0-r1
L GHSA-32ch-6x54-q4h9	<0.173.0-r1
L GHSA-fgq5-q76c-gx78	<0.173.0-r1
L CVE-2024-24785	<0.173.0-r1
L GHSA-j6m3-gc37-6r6q	<0.173.0-r1
L CVE-2023-45289	<0.173.0-r1
L CVE-2024-24784	<0.173.0-r1
H Use of Uninitialized Resource	<0.172.0-r1
L GHSA-r53h-jv2g-vpx6	<0.172.0-r1
L GHSA-v53g-5gjp-272r	<0.172.0-r1
M Directory Traversal	<0.172.0-r1
L GHSA-7ww5-4wqc-m92c	<0.167.0-r1
L GHSA-45x7-px36-x8w8	<0.167.0-r1
M Improper Validation of Integrity Check Value	<0.167.0-r1

Vulnerability

Vulnerable Version

Arbitrary Code Injection

<0.211.0-r0

GHSA-557j-xg8c-q2mm

<0.211.0-r0

GHSA-4hfp-h4cw-hj8p

<0.207.0-r3

GHSA-5xqw-8hwv-wg92

<0.207.0-r3

Stack-based Buffer Overflow

<0.207.0-r3