Skip to content
Threat Feed
Subscribe

Tag

Kubevela

1 brief RSS
medium advisory

KubeVela Terraform Remote Loader Denial of Service via Unbounded File Read

An attacker with ComponentDefinition management permissions can trigger a control-plane denial of service in KubeVela by injecting a symlink to /dev/zero within a remote Terraform repository, causing an OOM-induced controller crash.

vela-core +2 denial-of-service kubernetes kubevela
1t 1c