Kubernetes-sigs vulnerabilities
We track 1 vulnerability in Kubernetes-sigs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2025.
1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score
Latest Kubernetes-sigs vulnerabilities
- 7.7 High severity
headlamp: Improper Neutralization of Special Elements used in an OS Command
Headlamp is an extensible Kubernetes web UI. A command injection vulnerability was discovered in the codeSign.js script used in the macOS packaging workflow of the Kubernetes Headlamp project. This issue arises due to the improper use of Node.js's execSync() f