Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/chaos-mesh/chaos-mesh

4 known vulnerabilities (3 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 3 critical, 1 high
Registry
pkg.go.dev

Advisories 4

  • CVE-2025-59361Critical 9.8

    OS command injection in Chaos Mesh via the cleanIptables mutation

    Affected: fixed in 2.7.3; all versions.

  • CVE-2025-59360Critical 9.8

    OS command injection in Chaos Mesh via the killProcesses mutation

    Affected: all versions; fixed in 2.7.3.

  • CVE-2025-59359Critical 9.8

    OS command injection in Chaos Mesh via the cleanTcs mutation

    Affected: fixed in 2.7.3; all versions.

  • Denial of Service via Unauthorized Access to Chaos Mesh debugging server

    Affected: fixed in 2.7.3; all versions.