Devtron - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-31.

Products

• Devtron - 3 CVEs

Newest CVEs of Devtron

• CVE-2026-82882 - CVSS 8.8 (high), 2026-08-31: Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to retrieve…
• CVE-2026-25538 - CVSS 8.8 (high), 2026-02-04: Devtron is an open source tool integration platform for Kubernetes. In version 2.0.0 and prior, a vulnerability exists in Devtron's Attributes API interface,…
• CVE-2024-45794 - CVSS 8.8 (high), 2024-11-07: devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and…