Browse / Kubernetes

Kubernetes

See its reports on the map

Attack surface: 662 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Kubernetes

• Access Control14
• Authentication12
• Information Disclosure11
• Code Execution10
• Denial of Service6
• Cryptography5

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Development Application Credentials + Information ExposedDuplicateCleartext Storage of Sensitive Information · high
   31 votes
2. Route53 Subdomain Takeover on test-cncf-aws.canary.k8s.ioDuplicateMisconfiguration · high
   13 votes
3. Unsecured Grafana instance on https://monitoring.prow-canary.k8s.io/dashboardsDuplicateImproper Authentication - Generic · high
   4 votes
4. Fake email from <any_name>@kubernetes.io to any other emailDuplicate
   3 votes
5. exposed Git Repo at http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.io/.git/DuplicateInformation Disclosure · high
   2 votes
6. csi-snapshot-controller crashes when processing VolumeSnapshot with non-existing PVCDuplicateNULL Pointer Dereference · medium
   1 votes
7. There is any issue No valid SPF RecordsDuplicateImproper Authentication - Generic
   1 votes
8. Sensitive Information disclosure Through Config FileDuplicateInformation Disclosure
   1 votes