devspace vulnerabilities

CVEs whose affected-version data names the devspace package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-91200High· 8.8

1w ago

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries with traversal sequences to write arbitrary files on the d…

▾ Twilightdevspace · devspaceEPSS 0.42%via NVD