cncf
Security Risk Profile
29
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 212 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 30, 2016 to present
212
Total CVEs
5
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
29/100
low
Severity Distribution
Critical
1High
4Medium
4Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Input Validation
1
Most Affected Products
1. CNCF Envoy74
2. CNCF Prometheus56
3. CNCF Kubernetes38
4. CNCF containerd21
5. CNCF etcd14
Recent Vulnerabilities
See more →EOL-envoy-1.39
unknown
7/14/2026
EOL-etcd-3.7
unknown
7/8/2026
EOL-prometheus-3.13
unknown
7/1/2026
EOL-prometheus-3.12
unknown
5/28/2026
EOL-containerd-2.3
unknown
4/30/2026
EOL-envoy-1.38
unknown
4/23/2026
EOL-kubernetes-1.36
unknown
4/22/2026
EOL-prometheus-3.11
unknown
4/2/2026
EOL-prometheus-3.10
unknown
2/25/2026
EOL-envoy-1.37
unknown
1/13/2026
Monitor cncf in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.