cluster-autoscaler-1.31-compat

Direct Vulnerabilities

Known vulnerabilities in the cluster-autoscaler-1.31-compat package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H NULL Pointer Dereference	*
L CVE-2026-39825	*
L Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
L CVE-2026-42499	*
L Improper Encoding or Escaping of Output	*
M Link Following	*
H Double Free	*
M Out-of-bounds Write	*
L CVE-2026-42501	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Improper Authorization	*
H Untrusted Search Path	*
C CVE-2026-27143	<1.31.5-r4
H Access of Resource Using Incompatible Type ('Type Confusion')	<1.31.5-r4
M Cross-site Scripting (XSS)	<1.31.5-r4
H Improper Certificate Validation	<1.31.5-r4
H Improper Certificate Validation	<1.31.5-r4
L CVE-2026-32280	<1.31.5-r4
M Allocation of Resources Without Limits or Throttling	<1.31.5-r4
H Allocation of Resources Without Limits or Throttling	<1.31.5-r4
H Incorrect Authorization	<1.31.5-r4
M Link Following	<1.31.5-r4
L Untrusted Search Path	*
L Directory Traversal	<1.31.5-r3
L Cross-site Scripting (XSS)	<1.31.5-r3
L Direct Request ('Forced Browsing')	<1.31.5-r3
L CVE-2025-61732	<1.31.5-r2
C CVE-2025-68121	<1.31.5-r2
L Out-of-bounds Write	<1.31.5-r1
L Allocation of Resources Without Limits or Throttling	<1.31.5-r1
L CVE-2025-61731	<1.31.5-r1
L Allocation of Resources Without Limits or Throttling	<1.31.5-r1
L CVE-2025-61730	<1.31.5-r1
H Symlink Following	*
L Asymmetric Resource Consumption (Amplification)	*
L CVE-2024-45310	*
L CVE-2025-22868	*
L CVE-2025-1767	*
H Symlink Following	*
L Improper Handling of Exceptional Conditions	*
L CVE-2025-47914	*
L CVE-2024-45337	*
L CVE-2025-58181	*
H Symlink Following	*
L CVE-2025-22869	*
L CVE-2025-22872	*
L CVE-2025-13281	*
L CVE-2025-22870	*

cluster-autoscaler-1.31-compat

Direct Vulnerabilities

Fix vulnerabilities automatically