lagoon vulnerabilities

CVEs whose affected-version data names the lagoon package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113788Critical· 9.4

today

Lagoon core ssh service vulnerable to remote code execution

Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a vulnerability in the `ssh` service in Lagoon core that would allow an attacker to execute arbitrary code which could lead to, among other things, …

▾ Midnightuselagoon · lagoonvia CVEORG