nuclio vulnerabilities

Newest CVEs

• CVE-2026-52831

  Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE

  nuclio · nuclio

  High8.0
• CVE-2026-79756

  Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform

  nuclio · nuclio

  High8.7
• CVE-2026-79755

  Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)

  nuclio · nuclio

  High8.0
• CVE-2026-79754

  Nuclio: Kaniko build tempDir command injection

  nuclio · nuclio

  High7.1
• CVE-2026-52833

  Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE

  nuclio · nuclio

  High8.0
• CVE-2026-52832

  Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container

  nuclio · nuclio

  Medium4.9
• CVE-2026-45730

  Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project

  nuclio · nuclio

  High8.3
• CVE-2026-29042

  Nuclio Shell Runtime Command Injection Leading to Privilege Escalation

  nuclio · nuclio

  High8.9