kubescape-fips

Direct Vulnerabilities

Known vulnerabilities in the kubescape-fips package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L CVE-2026-56852	<4.0.11-r1
L CVE-2026-46600	<4.0.11-r1
L Directory Traversal	<4.0.11-r1
M Improper Check for Unusual or Exceptional Conditions	<4.0.10-r7
L Uncontrolled Memory Allocation	<4.0.10-r6
L GHSA-9g5q-2w5x-hmxf	*
H Improper Verification of Cryptographic Signature	<4.0.10-r6
L GHSA-rjr7-jggh-pgcp	*
L CVE-2026-42505	<4.0.10-r5
L CVE-2026-39822	<4.0.10-r5
L Incorrect Authorization	<4.0.10-r4
L Cleartext Transmission of Sensitive Information	<4.0.10-r3
H Allocation of Resources Without Limits or Throttling	<4.0.10-r3
L External Control of File Name or Path	<4.0.10-r3
L Server-Side Request Forgery (SSRF)	<4.0.10-r3
L CVE-2026-49478	<4.0.10-r3
L GHSA-vh4v-2xq2-g5cg	<4.0.10-r3
L CVE-2026-2303	<4.0.10-r1
L CVE-2026-46601	<4.0.10-r1
L CVE-2026-46602	<4.0.10-r1
L CVE-2026-46604	<4.0.10-r1
L CVE-2026-33813	<4.0.10-r1
L CVE-2026-48702	<4.0.10-r1
L CVE-2026-42500	<4.0.9-r1
L Symlink Following	<4.0.9-r1
L CVE-2026-46599	<4.0.9-r1
H Symlink Following	*
L Improper Input Validation	<4.0.9-r1
L CVE-2026-47262	<4.0.9-r1
L CVE-2026-50195	<4.0.9-r1
H Authentication Bypass	*
L Improper Input Validation	<4.0.9-r1
L Uncontrolled Search Path Element	*