knative func vulnerabilities

Latest knative func CVEs

Newest publication first

1. CVE-2022-41939 Credential exposure when running third-party builders in knative/func

   Published 2022-11-19

   High·CVSS 7.4

   knative.dev/func is is a client library and CLI enabling the development and deployment of Kubernetes functions. Developers using a malicious or compromised third-party buildpack could expose their registry credentials or local docker socket to a malicious lifecycle container. Th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.