CLEANSTART-2025-AS71068

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-AS71068.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLEANSTART-2025-AS71068
Upstream
Published
2026-10-31T14:00:57Z
Modified
2026-10-31T16:02:31Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced
Details

Security vulnerability affects the k3s package. The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced.

References

Affected packages

CleanStart / k3s

Package

Name
k3s
Purl
pkg:apk/cleanstart/k3s

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.8.0-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-AS71068.json"