kruise vulnerabilities

1 known vulnerability in kruise from OpenKruise. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  kruise: Server-Side Request Forgery

  CVE-2026-24005Feb 25, 2026OpenKruise

  Kruise provides automated management of large-scale applications on Kubernetes. Prior to versions 1.8.3 and 1.7.5, PodProbeMarker allows defining custom probes with TCPSocket or HTTPGet handlers. The webhook validation does not restrict the Host field in these