MEDIUM6.8Go
GHSA-864f-7xjm-2jp2· CVE-2025-46599, GO-2025-3646CNCF K3s Kubernetes kubelet configuration exposes credentials
Modified: 9/10/2026
package
Go/github.com/k3s-io/k3s
pkg:go/github.com/k3s-io/k3s
MEDIUM5.8Go
GHSA-jxr7-mqhw-9p98· CVE-2026-54250, GO-2026-5973K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Modified: 9/10/2026
HIGH7.5Go
GHSA-m4hf-6vgr-75r2· CVE-2023-32187K3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack
Modified: 9/10/2026
—Go
GO-2025-3646· CVE-2025-46599, GHSA-864f-7xjm-2jp2CNCF K3s Kubernetes kubelet configuration exposes credentials in github.com/k3s-io/k3s
Modified: 2/4/2026
—Go
GO-2026-5973· CVE-2026-54250, GHSA-jxr7-mqhw-9p98K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression in github.com/k3s-io/k3s
Modified: 7/28/2026