VYPR

Headlamp

by Kubernetes Sigs

Source repositories

CVEs (1)

  • CVE-2025-53542HigJul 10, 2025
    risk 0.43cvss 7.7epss 0.01

    Headlamp is an extensible Kubernetes web UI. A command injection vulnerability was discovered in the codeSign.js script used in the macOS packaging workflow of the Kubernetes Headlamp project. This issue arises due to the improper use of Node.js's execSync() function with…