CRITICAL9.8Go
GHSA-6h8c-gw33-cjm2· CVE-2020-15391DevSpace vulnerable to remote code execution
Modified: 11/8/2023
package
Go/github.com/loft-sh/devspace
pkg:go/github.com/loft-sh/devspace
HIGH7.7Go
GHSA-hqwm-7x7x-8379· CVE-2026-42283, GO-2026-5433DevSpace UI Server WebSocket CheckOrigin does not validate source
Modified: 6/25/2026
—Go
GO-2026-5433· CVE-2026-42283, GHSA-hqwm-7x7x-8379DevSpace UI Server WebSocket CheckOrigin does not validate source in github.com/loft-sh/devspace
Modified: 6/25/2026