cluster-api-kubeadm-bootstrap-controller

Direct Vulnerabilities

Known vulnerabilities in the cluster-api-kubeadm-bootstrap-controller package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2026-94447	*
L CVE-2026-94444	*
L CVE-2026-97030	*
L CVE-2026-78667	*
L CVE-2026-78659	*
L CVE-2026-78663	*
L CVE-2026-94448	*
L CVE-2026-97032	*
L CVE-2026-94439	*
L CVE-2026-94440	*
L CVE-2026-78669	*
L CVE-2026-97031	*
L CVE-2026-78660	*
L CVE-2026-56866	*
L CVE-2026-56857	*
L CVE-2026-56851	*
L Information Exposure	*
L Improper Handling of Case Sensitivity	*
L Improper Validation of Array Index	*
L Resource Exhaustion	*
L Race Condition	*
L CVE-2026-56864	*
L CVE-2026-56865	*
L CVE-2026-56860	*
L CVE-2026-56853	*
L CVE-2026-56862	*
L CVE-2026-33818	*
L CVE-2026-56859	*
L CVE-2026-56858	*
L GHSA-gcjh-h69q-9w9g	*
L GHSA-hrxh-6v49-42gf	*
L CVE-2026-56852	*
L CVE-2026-46600	*
L CVE-2026-39822	*
L CVE-2026-42505	*
L Uncontrolled Memory Allocation	*
L Uncontrolled Memory Allocation	*
L CVE-2026-39824	<1.12.8-r2
L Improper Restriction of Rendered UI Layers or Frames	<1.12.8-r2
L Cross-site Scripting (XSS)	<1.12.8-r2
L CVE-2026-39821	<1.12.8-r2
L Resource Exhaustion	<1.12.8-r2
L Improper Restriction of Rendered UI Layers or Frames	<1.12.8-r2
L Improper Restriction of Rendered UI Layers or Frames	<1.12.8-r2
L CVE-2026-42504	<1.12.8-r1
L CVE-2026-42507	<1.12.8-r1
L CVE-2026-27145	<1.12.8-r1
L CVE-2026-39825	<1.12.7-r1
L Cross-site Scripting (XSS)	<1.12.7-r1
L CVE-2026-42501	<1.12.7-r1
H NULL Pointer Dereference	<1.12.7-r1
H Allocation of Resources Without Limits or Throttling	<1.12.7-r1
L Improper Encoding or Escaping of Output	<1.12.7-r1
M Out-of-bounds Write	<1.12.7-r1
M Link Following	<1.12.7-r1
L CVE-2026-42499	<1.12.7-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.12.7-r1
H Double Free	<1.12.7-r1

cluster-api-kubeadm-bootstrap-controller

Direct Vulnerabilities

Fix vulnerabilities automatically