k3s-1.32-static

Direct Vulnerabilities

Known vulnerabilities in the k3s-1.32-static package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Improper Restriction of Rendered UI Layers or Frames	*
L Improper Certificate Validation	*
L Allocation of Resources Without Limits or Throttling	*
M Memory Leak	*
L Improper Certificate Validation	*
H Untrusted Search Path	*
L CVE-2025-22870	*
L Improper Restriction of Rendered UI Layers or Frames	*
L Missing Authorization	*
H Allocation of Resources Without Limits or Throttling	*
L Improper Input Validation	*
L Improper Input Validation	*
L Uncontrolled Recursion	*
L CVE-2025-22869	*
L Improper Validation of Array Index	*
L Reachable Assertion	*
L CVE-2025-47914	*
L CVE-2026-46598	*
L CVE-2026-39821	*
L CVE-2025-22872	*
L Memory Leak	*
L Symlink Following	*
L Incorrect Type Conversion or Cast	*
M Improper Authentication	*
M Incorrect Authorization	*
L CVE-2024-45337	*
L Out-of-Bounds	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
L Untrusted Search Path	*
L Improper Privilege Management	*
M CVE-2026-26014	*
H Authentication Bypass	*
L Cross-site Scripting (XSS)	*
L Uncaught Exception	*
L GO-2026-5932	*
L Improper Initialization	*
L Allocation of Resources Without Limits or Throttling	*
L Information Exposure	*
L Integer Overflow or Wraparound	*
H Incorrect Execution-Assigned Permissions	*
L Resource Exhaustion	*
H Allocation of Resources Without Limits or Throttling	*
M Information Exposure	*
L Incorrect Authorization	*
M Improper Authentication	*
L CVE-2026-50195	*
L Improper Restriction of Rendered UI Layers or Frames	*
H Off-by-one Error	*
L NULL Pointer Dereference	*
L Uncontrolled Memory Allocation	*
H Symlink Following	*
L CVE-2025-58181	*
L Allocation of Resources Without Limits or Throttling	*
H CVE-2025-15558	*
L Improper Authorization	*
L Symlink Following	*
L CVE-2026-39824	*
L CVE-2026-47262	*
H Resource Exhaustion	*
M CVE-2025-47911	*
L CVE-2024-45338	*
L Directory Traversal	*
M Authentication Bypass	*
L Improper Certificate Validation	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L CVE-2026-46595	*
L Improper Authentication	*
H Arbitrary Command Injection	*
L Improper Verification of Cryptographic Signature	*
L Cross-site Scripting (XSS)	*
L Allocation of Resources Without Limits or Throttling	*
M Missing Initialization of Resource	*
L Deserialization of Untrusted Data	*
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	*
L Uncontrolled Search Path Element	*
C SQL Injection	*
L CVE-2024-28180	*
H Plaintext Storage of a Password	*
L CVE-2026-39822	<1.32.13.1-r1
L CVE-2026-42505	<1.32.13.1-r1
L Improper Authorization	*
L Integer Overflow or Wraparound	*
L CVE-2026-33816	*
L Missing Authorization	*
L Improper Input Validation	*
L CVE-2026-33815	*

Vulnerability

Vulnerable Version

Improper Restriction of Rendered UI Layers or Frames