cni-plugins (SUSE:Linux Enterprise Module for Public Cloud 15) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Public Cloud 15 package cni-plugins, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2021-20206 — CVSS 7.2 (high): An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load…
• CVE-2020-10749 — CVSS 6.0 (medium): A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in…