kubeoperator/kubepi Security Advisories | GitStock

high2023-01-09

KubePi session fixation attack allows an attacker to hijack a legitimate user session.

GHSA-v4w5-r2xc-7f8h · CVE-2023-22479

high2023-01-09

KubePi may allow unauthorized access to system API

GHSA-gqx8-hxmv-c4v4 · CVE-2023-22478

critical2023-01-06

KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys

GHSA-vjhf-8vqx-vqpq · CVE-2023-22463