https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T06:51:31.196771+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-28110 CVE-2023-28110 — JumpServer Koko vulnerable to Command Injection for Kubernetes Connection 2026-10-19T06:51:31.197939+00:00

Affected: jumpserver

Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP service and Web Terminal service. Prior to version 2.28.8, using illegal tokens to connect to a Kubernetes cluster through Koko can result in the execution of dangerous commands that may disrupt the Koko container environment and affect normal usage. The vulnerability has been fixed in v2.28.8.