k8sgpt vulnerabilities

Known vulnerabilities in the k8sgpt package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L GHSA-w32m-9786-jp63	<0.3.48-r2
L CVE-2024-45338	<0.3.48-r2
L CVE-2024-45337	<0.3.48-r1
L GHSA-v778-237x-gjrc	<0.3.48-r1
L GHSA-c77r-fh37-x2px	<0.3.42-r1
H Authentication Bypass	<0.3.42-r1
L CVE-2024-34155	<0.3.40-r1
L GHSA-8xfx-rj4p-23jm	<0.3.40-r1
L GHSA-j7vj-rw65-4v26	<0.3.40-r1
L CVE-2024-34156	<0.3.40-r1
L CVE-2024-34158	<0.3.40-r1
L GHSA-crqm-pwhx-j97f	<0.3.40-r1
L CVE-2024-41110	<0.3.39-r1
L GHSA-v23v-6jw2-98fq	<0.3.39-r1
L GHSA-xr7q-jx4m-x55m	<0.3.37-r2
L CVE-2024-24791	<0.3.37-r1
L GHSA-hw49-2p59-3mhj	<0.3.37-r1
L GHSA-m5vv-6r4h-3vj9	<0.3.32-r3
M Race Condition	<0.3.32-r3
L GHSA-236w-p7wf-5ph8	<0.3.32-r2
L GHSA-49gw-vxvf-fc2g	<0.3.32-r2
M CVE-2024-24789	<0.3.32-r2
C CVE-2024-24790	<0.3.32-r2
L CVE-2024-35192	<0.3.32-r1
L GHSA-xcq4-m2r3-cmrj	<0.3.32-r1
L CVE-2024-24787	<0.3.30-r1
L GHSA-2jwv-jmq4-4j3r	<0.3.30-r1
L CVE-2024-24788	<0.3.30-r1
L GHSA-5fq7-4mxc-535h	<0.3.30-r1
L GHSA-4v7x-pqxf-cx7m	<0.3.29-r1
L CVE-2023-45288	<0.3.29-r1
L GHSA-xw73-rw38-6vjc	<0.3.28-r2
H Origin Validation Error	<0.3.28-r2
L GHSA-8r3f-844c-mc37	<0.3.28-r1
L CVE-2024-24786	<0.3.28-r1
L CVE-2024-24784	<0.3.27-r3
L GHSA-rr6r-cfgf-gc6h	<0.3.27-r3
L CVE-2023-45290	<0.3.27-r3
L GHSA-32ch-6x54-q4h9	<0.3.27-r3
L CVE-2024-24785	<0.3.27-r3
L GHSA-3q2c-pvp5-3cqp	<0.3.27-r3
L GHSA-j6m3-gc37-6r6q	<0.3.27-r3
L GHSA-fgq5-q76c-gx78	<0.3.27-r3
L CVE-2024-24783	<0.3.27-r3
L CVE-2023-45289	<0.3.27-r3
L CVE-2024-26147	<0.3.27-r2
L GHSA-r53h-jv2g-vpx6	<0.3.27-r2
L Directory Traversal	<0.3.27-r1
L GHSA-v53g-5gjp-272r	<0.3.27-r1
L GHSA-4374-p667-p6c8	<0.3.18-r1
L GHSA-2wrh-6pvc-2jm9	<0.3.18-r1
H Allocation of Resources Without Limits or Throttling	<0.3.18-r1
M Cross-site Scripting (XSS)	<0.3.18-r1

Vulnerability

Vulnerable Version

<0.3.48-r2

<0.3.48-r2

<0.3.48-r1

<0.3.48-r1

<0.3.42-r1