| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/chaos-mesh/chaos-mesh | < 2.7.3all versions | 2.7.3 |
| chaos mesh | < 2.7.3 | 2.7.3 |
The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free