Layer5 - vulnerabilities (CVEs)

7 CVEs in 1 products, 0 in the last 30 days, newest from 2026-07-23.

Products

CVE-2026-65919 - CVSS 8.7 (high), 2026-07-23: Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api/system/fileDownload endpoints that…
CVE-2024-36535 - CVSS 9.8 (critical), 2024-07-24: Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVE-2024-35182 - CVSS 8.1 (high), 2024-05-27: Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection…
CVE-2024-35181 - CVSS 8.1 (high), 2024-05-27: Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection…
CVE-2024-29031 - CVSS 7.5 (high), 2024-03-21: Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection…
CVE-2023-46575 - CVSS 9.8 (critical), 2023-11-24: A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary…
CVE-2021-31856 - CVSS 9.8 (critical), 2021-04-28: A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles…