Devfile vulnerabilities
We track 1 vulnerability in Devfile products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 14, 2024.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Devfile vulnerabilities
- 9.3 Critical severity
OpenShift Developer Tools and Services: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. This could download a malicious archive and