LOWGo
GHSA-7xg2-83f8-39mr· GO-2024-2441The DES/3DES cipher was used as part of the TLS protocol by installation tools
Modified: 6/28/2024
package
Go/github.com/karmada-io/karmada
pkg:go/github.com/karmada-io/karmada
MEDIUMGo
GHSA-cwrh-575j-8vr3· CVE-2024-56514, GO-2025-3363Karmada Tar Slips in CRDs archive extraction
Modified: 1/7/2025
HIGHGo
GHSA-mg7w-c9x2-xh7r· CVE-2024-56513, GO-2025-3364Karmada PULL Mode Cluster Privilege Escalation
Modified: 1/7/2025
HIGH8.4Go
GHSA-wccg-v638-j9q2· CVE-2024-33396, GO-2024-2817karmada vulnerable to arbitrary code execution via a crafted command
Modified: 7/3/2024
—Go
GO-2024-2441· GHSA-7xg2-83f8-39mrThe DES/3DES cipher was used as part of the TLS protocol by installation tools in github.com/karmada-io/karmada
Modified: 3/3/2026
—Go
GO-2024-2817· CVE-2024-33396, GHSA-wccg-v638-j9q2karmada vulnerable to arbitrary code execution via a crafted command in github.com/karmada-io/karmada
Modified: 3/3/2026
—Go
GO-2025-3363· CVE-2024-56514, GHSA-cwrh-575j-8vr3Karmada Tar Slips in CRDs archive extraction in github.com/karmada-io/karmada
Modified: 3/3/2026
—Go
GO-2025-3364· CVE-2024-56513, GHSA-mg7w-c9x2-xh7rKarmada PULL Mode Cluster Privilege Escalation in github.com/karmada-io/karmada
Modified: 3/3/2026