k3s-io/k3s Security Advisories | GitStock

medium2026-07-14

K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression

GHSA-jxr7-mqhw-9p98 · CVE-2026-54250

medium2025-04-25

CNCF K3s Kubernetes kubelet configuration exposes credentials

GHSA-864f-7xjm-2jp2 · CVE-2025-46599

high2023-09-11

K3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack

GHSA-m4hf-6vgr-75r2 · CVE-2023-32187