Approved changes feed: RSS · Atom

cpe:2.3:a:chaos-mesh:chaos-mesh:2.6.3:*:*:*:*:*:*:*

part: a version: 2.6.3 update: *

VendorChaos Mesh (55c79863-9962-514d-9124-144c6897f0b8)
ProductChaos Mesh (c31cc0f4-c0f2-5d7e-8b1e-4d7a7d5c6152)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/chaos-mesh/chaos-mesh purl2cpe 2026-06-01 10:11:23.161855
pkg:golang/github.com/chaos-mesh/chaos-mesh purl2cpe 2026-06-01 10:11:23.161856

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36538 vulnerable 2026-06-08 06:39:45.476106 Details available
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Published: 2024-07-24T00:00:00.000Z
Updated: 2024-08-02T03:37:05.270Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.