k8s.io/kubernetes (Go)
Advisories
161
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 1.34.2 or later clears every advisory below that has a fix.
Upgrade commands
go
go get k8s.io/kubernetes@v1.34.2 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-r6j8-c6r2-37rr kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass |
Medium EPSS 0.39% |
< 1.32.10 | 1.32.10 |
| GHSA-r6j8-c6r2-37rr kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass |
Medium EPSS 0.39% |
< 1.32.10>= 1.33.0-alpha.0, < 1.33.6>= 1.34.0-alpha.0, < 1.34.2 | 1.32.101.33.61.34.2 |
| GHSA-r6j8-c6r2-37rr kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass |
Medium EPSS 0.39% |
>= 1.34.0-alpha.0, < 1.34.2 | 1.34.2 |
| GHSA-r6j8-c6r2-37rr kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass |
Medium EPSS 0.39% |
>= 1.33.0-alpha.0, < 1.33.6 | 1.33.6 |
| GHSA-4x4m-3c2p-qppc Kubernetes Nodes can delete themselves by adding an OwnerReference |
Medium EPSS 0.57% |
>= 1.32.0-alpha.0, < 1.32.8 | 1.32.8 |
| GHSA-4x4m-3c2p-qppc Kubernetes Nodes can delete themselves by adding an OwnerReference |
Medium EPSS 0.57% |
< 1.31.12>= 1.32.0-alpha.0, < 1.32.8>= 1.33.0-alpha.0, < 1.33.4 | 1.31.121.32.81.33.4 |
| GHSA-4x4m-3c2p-qppc Kubernetes Nodes can delete themselves by adding an OwnerReference |
Medium EPSS 0.57% |
>= 1.33.0-alpha.0, < 1.33.4 | 1.33.4 |
| GHSA-4x4m-3c2p-qppc Kubernetes Nodes can delete themselves by adding an OwnerReference |
Medium EPSS 0.57% |
< 1.31.12 | 1.31.12 |
| GHSA-hj2p-8wj8-pfq4 kubernetes allows nodes to bypass dynamic resource allocation authorization checks |
Low EPSS 0.83% |
>= 1.33.0, < 1.33.2 | 1.33.2 |
| GHSA-hj2p-8wj8-pfq4 kubernetes allows nodes to bypass dynamic resource allocation authorization checks |
Low EPSS 0.83% |
>= 1.32.0, < 1.32.6 | 1.32.6 |
| GHSA-hj2p-8wj8-pfq4 kubernetes allows nodes to bypass dynamic resource allocation authorization checks |
Low EPSS 0.83% |
>= 1.32.0, < 1.32.6>= 1.33.0, < 1.33.2 | 1.32.61.33.2 |
| GO-2025-3547 Kubernetes kube-apiserver Vulnerable to Race Condition |
Low EPSS 0.32% |
>= 1.3.0 | No fix yet |
| GHSA-3wgm-2gw2-vh5m Kubernetes GitRepo Volume Inadvertent Local Repository Access |
Medium EPSS 0.70% |
all versions | No fix yet |
| GHSA-3wgm-2gw2-vh5m Kubernetes GitRepo Volume Inadvertent Local Repository Access |
Medium EPSS 0.70% |
<= 1.32.3 | No fix yet |
| GHSA-vv39-3w5q-974q Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API |
Medium EPSS 1.40% |
< 1.29.13 | 1.29.13 |
| GHSA-vv39-3w5q-974q Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API |
Medium EPSS 1.40% |
>= 1.31.0-alpha.0, < 1.31.5 | 1.31.5 |
| GHSA-vv39-3w5q-974q Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API |
Medium EPSS 1.40% |
>= 1.32.0-alpha.0, < 1.32.1 | 1.32.1 |
| GHSA-vv39-3w5q-974q Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API |
Medium EPSS 1.40% |
< 1.29.13>= 1.30.0-alpha.0, < 1.30.9>= 1.31.0-alpha.0, < 1.31.5>= 1.32.0-alpha.0, < 1.32.1 | 1.29.131.30.91.31.51.32.1 |
| GHSA-vv39-3w5q-974q Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API |
Medium EPSS 1.40% |
>= 1.30.0-alpha.0, < 1.30.9 | 1.30.9 |
| GHSA-jgfp-53c3-624w Node Denial of Service via kubelet Checkpoint API |
Medium EPSS 0.37% |
< 1.29.14 | 1.29.14 |
| GHSA-jgfp-53c3-624w Node Denial of Service via kubelet Checkpoint API |
Medium EPSS 0.37% |
>= 1.30.0, < 1.30.10 | 1.30.10 |
| GHSA-jgfp-53c3-624w Node Denial of Service via kubelet Checkpoint API |
Medium EPSS 0.37% |
>= 1.31.0, < 1.31.6 | 1.31.6 |
| GHSA-jgfp-53c3-624w Node Denial of Service via kubelet Checkpoint API |
Medium EPSS 0.37% |
>= 1.32.0, < 1.32.2 | 1.32.2 |
| GHSA-jgfp-53c3-624w Node Denial of Service via kubelet Checkpoint API |
Medium EPSS 0.37% |
< 1.29.14>= 1.30.0, < 1.30.10>= 1.31.0, < 1.31.6>= 1.32.0, < 1.32.2 | 1.29.141.30.101.31.61.32.2 |
| GHSA-27wf-5967-98gx Kubernetes kubelet arbitrary command execution |
High EPSS 3.03% |
< 1.28.12 | 1.28.12 |
| GHSA-27wf-5967-98gx Kubernetes kubelet arbitrary command execution |
High EPSS 3.03% |
>= 1.29.0, < 1.29.7 | 1.29.7 |
| GHSA-27wf-5967-98gx Kubernetes kubelet arbitrary command execution |
High EPSS 3.03% |
>= 1.30.0, < 1.30.3 | 1.30.3 |
| GHSA-27wf-5967-98gx Kubernetes kubelet arbitrary command execution |
High EPSS 3.03% |
< 1.28.12>= 1.29.0, < 1.29.7>= 1.30.0, < 1.30.3 | 1.28.121.29.71.30.3 |
| GHSA-h7wq-jj8r-qm7p Kubernetes Nil pointer dereference in KCM after v1 HPA patch request |
High EPSS 0.59% |
< 1.27.0-alpha.1 | 1.27.0-alpha.1 |
| GHSA-h7wq-jj8r-qm7p Kubernetes Nil pointer dereference in KCM after v1 HPA patch request |
High EPSS 0.59% |
< 1.27.0-alpha.1 | 1.27.0-alpha.1 |
| GHSA-82m2-cv7p-4m75 Kubernetes sets incorrect permissions on Windows containers logs |
Medium EPSS 0.31% |
< 1.27.16 | 1.27.16 |
| GHSA-82m2-cv7p-4m75 Kubernetes sets incorrect permissions on Windows containers logs |
Medium EPSS 0.31% |
>= 1.28.0, < 1.28.12 | 1.28.12 |
| GHSA-82m2-cv7p-4m75 Kubernetes sets incorrect permissions on Windows containers logs |
Medium EPSS 0.31% |
>= 1.29.0, < 1.29.7 | 1.29.7 |
| GHSA-82m2-cv7p-4m75 Kubernetes sets incorrect permissions on Windows containers logs |
Medium EPSS 0.31% |
>= 1.30.0, < 1.30.3 | 1.30.3 |
| GHSA-82m2-cv7p-4m75 Kubernetes sets incorrect permissions on Windows containers logs |
Medium EPSS 0.31% |
< 1.27.16>= 1.28.0, < 1.28.12>= 1.29.0, < 1.29.7>= 1.30.0, < 1.30.3 | 1.27.161.28.121.29.71.30.3 |
| GO-2024-2780 Kubelet Incorrect Privilege Assignment |
Medium EPSS 0.60% |
>= 1.13.0, < 1.13.7>= 1.14.0, < 1.14.3 | 1.13.71.14.3 |
| GO-2024-2755 Sensitive Information leak via Log File in Kubernetes |
Medium EPSS 0.54% |
< 1.19.3 | 1.19.3 |
| GO-2024-2754 Sensitive Information leak via Log File in Kubernetes |
Medium EPSS 0.53% |
< 1.17.13>= 1.18.0, < 1.18.10>= 1.19.0, < 1.19.3 | 1.17.131.18.101.19.3 |
| GO-2024-2753 Denial of service in Kubernetes |
Medium EPSS 0.43% |
>= 1.1.0, < 1.16.13>= 1.17.0, < 1.17.9>= 1.18.0, < 1.18.6 | 1.16.131.17.91.18.6 |
| GHSA-33c5-9fx5-fvjm Privilege Escalation in Kubernetes |
Medium EPSS 6.10% |
< 1.16.13 | 1.16.13 |
| GHSA-33c5-9fx5-fvjm Privilege Escalation in Kubernetes |
Medium EPSS 6.10% |
>= 1.17.0, < 1.17.9 | 1.17.9 |
| GHSA-33c5-9fx5-fvjm Privilege Escalation in Kubernetes |
Medium EPSS 6.10% |
>= 1.18.0, < 1.18.7 | 1.18.7 |
| GHSA-33c5-9fx5-fvjm Privilege Escalation in Kubernetes |
Medium EPSS 6.10% |
< 1.16.13>= 1.17.0, < 1.17.9>= 1.18.0, < 1.18.7 | 1.16.131.17.91.18.7 |
| GHSA-pxhw-596r-rwq5 Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin |
Low EPSS 2.22% |
< 1.27.13>= 1.28.0, < 1.28.9>= 1.29.0, < 1.29.4 | 1.27.131.28.91.29.4 |
| GHSA-pxhw-596r-rwq5 Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin |
Low EPSS 2.22% |
>= 1.28.0, < 1.28.9 | 1.28.9 |
| GHSA-pxhw-596r-rwq5 Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin |
Low EPSS 2.22% |
>= 1.29.0, < 1.29.4 | 1.29.4 |
| GHSA-pxhw-596r-rwq5 Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin |
Low EPSS 2.22% |
< 1.27.13 | 1.27.13 |
| GHSA-hq6q-c2x6-hmch Kubernetes Improper Input Validation vulnerability |
High EPSS 4.09% |
>= 1.28.0, < 1.28.4 | 1.28.4 |
| GHSA-hq6q-c2x6-hmch Kubernetes Improper Input Validation vulnerability |
High EPSS 4.09% |
< 1.25.16 | 1.25.16 |
| GHSA-hq6q-c2x6-hmch Kubernetes Improper Input Validation vulnerability |
High EPSS 4.09% |
>= 1.26.0, < 1.26.11 | 1.26.11 |
| GHSA-hq6q-c2x6-hmch Kubernetes Improper Input Validation vulnerability |
High EPSS 4.09% |
>= 1.27.0, < 1.27.8 | 1.27.8 |
| GHSA-hq6q-c2x6-hmch Kubernetes Improper Input Validation vulnerability |
High EPSS 4.09% |
< 1.25.16>= 1.26.0, < 1.26.11>= 1.27.0, < 1.27.8>= 1.28.0, < 1.28.4 | 1.25.161.26.111.27.81.28.4 |
| GHSA-q78c-gwqw-jcmc Kubernetes privilege escalation vulnerability |
High EPSS 4.00% |
>= 1.27.0, < 1.27.5 | 1.27.5 |
| GHSA-q78c-gwqw-jcmc Kubernetes privilege escalation vulnerability |
High EPSS 4.00% |
< 1.24.17>= 1.25.0, < 1.25.13>= 1.26.0, < 1.26.8>= 1.27.0, < 1.27.5>= 1.28.0, < 1.28.1 | 1.24.171.25.131.26.81.27.51.28.1 |
| GHSA-q78c-gwqw-jcmc Kubernetes privilege escalation vulnerability |
High EPSS 4.00% |
< 1.24.17 | 1.24.17 |
| GHSA-q78c-gwqw-jcmc Kubernetes privilege escalation vulnerability |
High EPSS 4.00% |
>= 1.25.0, < 1.25.13 | 1.25.13 |
| GHSA-q78c-gwqw-jcmc Kubernetes privilege escalation vulnerability |
High EPSS 4.00% |
>= 1.26.0, < 1.26.8 | 1.26.8 |
| GHSA-q78c-gwqw-jcmc Kubernetes privilege escalation vulnerability |
High EPSS 4.00% |
>= 1.28.0, < 1.28.1 | 1.28.1 |
| GHSA-7fxm-f474-hf8w Kubernetes privilege escalation vulnerability |
High EPSS 13.16% |
>= 1.27.0, < 1.27.5 | 1.27.5 |
| GHSA-7fxm-f474-hf8w Kubernetes privilege escalation vulnerability |
High EPSS 13.16% |
< 1.24.17>= 1.25.0, < 1.25.13>= 1.26.0, < 1.26.8>= 1.27.0, < 1.27.5>= 1.28.0, < 1.28.1 | 1.24.171.25.131.26.81.27.51.28.1 |
| GHSA-7fxm-f474-hf8w Kubernetes privilege escalation vulnerability |
High EPSS 13.16% |
< 1.24.17 | 1.24.17 |
| GHSA-7fxm-f474-hf8w Kubernetes privilege escalation vulnerability |
High EPSS 13.16% |
>= 1.25.0, < 1.25.13 | 1.25.13 |
| GHSA-7fxm-f474-hf8w Kubernetes privilege escalation vulnerability |
High EPSS 13.16% |
>= 1.26.0, < 1.26.8 | 1.26.8 |
| GHSA-7fxm-f474-hf8w Kubernetes privilege escalation vulnerability |
High EPSS 13.16% |
>= 1.28.0, < 1.28.1 | 1.28.1 |
| GHSA-35c7-w35f-xwgh Kube-proxy may unintentionally forward traffic |
Medium EPSS 0.92% |
< 1.21.0 | 1.21.0 |
| GHSA-35c7-w35f-xwgh Kube-proxy may unintentionally forward traffic |
Medium EPSS 0.92% |
< 1.21.0 | 1.21.0 |
| GHSA-cgcv-5272-97pr Kubernetes mountable secrets policy bypass |
Medium EPSS 2.16% |
>= 1.27.0, < 1.27.3 | 1.27.3 |
| GHSA-cgcv-5272-97pr Kubernetes mountable secrets policy bypass |
Medium EPSS 2.16% |
< 1.24.15>= 1.25.0, < 1.25.11>= 1.26.0, < 1.26.6>= 1.27.0, < 1.27.3 | 1.24.151.25.111.26.61.27.3 |
| GHSA-cgcv-5272-97pr Kubernetes mountable secrets policy bypass |
Medium EPSS 2.16% |
< 1.24.15 | 1.24.15 |
| GHSA-cgcv-5272-97pr Kubernetes mountable secrets policy bypass |
Medium EPSS 2.16% |
>= 1.25.0, < 1.25.11 | 1.25.11 |
| GHSA-cgcv-5272-97pr Kubernetes mountable secrets policy bypass |
Medium EPSS 2.16% |
>= 1.26.0, < 1.26.6 | 1.26.6 |
| GHSA-qc2g-gmh6-95p4 kube-apiserver vulnerable to policy bypass |
Medium EPSS 1.13% |
< 1.24.15 | 1.24.15 |
| GHSA-qc2g-gmh6-95p4 kube-apiserver vulnerable to policy bypass |
Medium EPSS 1.13% |
< 1.24.15>= 1.25.0, < 1.25.11>= 1.26.0, < 1.26.6>= 1.27.0, < 1.27.3 | 1.24.151.25.111.26.61.27.3 |
| GHSA-qc2g-gmh6-95p4 kube-apiserver vulnerable to policy bypass |
Medium EPSS 1.13% |
>= 1.26.0, < 1.26.6 | 1.26.6 |
| GHSA-qc2g-gmh6-95p4 kube-apiserver vulnerable to policy bypass |
Medium EPSS 1.13% |
>= 1.27.0, < 1.27.3 | 1.27.3 |
| GHSA-qc2g-gmh6-95p4 kube-apiserver vulnerable to policy bypass |
Medium EPSS 1.13% |
>= 1.25.0, < 1.25.11 | 1.25.11 |
| GHSA-xc8m-28vv-4pjc Kubelet vulnerable to bypass of seccomp profile enforcement |
Medium EPSS 0.26% |
>= 1.27.0, < 1.27.2 | 1.27.2 |
| GHSA-xc8m-28vv-4pjc Kubelet vulnerable to bypass of seccomp profile enforcement |
Medium EPSS 0.26% |
>= 1.25.0, < 1.25.10 | 1.25.10 |
| GHSA-xc8m-28vv-4pjc Kubelet vulnerable to bypass of seccomp profile enforcement |
Medium EPSS 0.26% |
< 1.24.14 | 1.24.14 |
| GHSA-xc8m-28vv-4pjc Kubelet vulnerable to bypass of seccomp profile enforcement |
Medium EPSS 0.26% |
< 1.24.14>= 1.25.0, < 1.25.10>= 1.26.0, < 1.26.5>= 1.27.0, < 1.27.2 | 1.24.141.25.101.26.51.27.2 |
| GHSA-xc8m-28vv-4pjc Kubelet vulnerable to bypass of seccomp profile enforcement |
Medium EPSS 0.26% |
>= 1.26.0, < 1.26.5 | 1.26.5 |
| GO-2023-1629 Kubernetes vulnerable to validation bypass |
High EPSS 1.62% |
>= 1.22.0, < 1.22.16>= 1.23.0, < 1.23.14>= 1.24.0, < 1.24.8>= 1.25.0, < 1.25.4 | 1.22.161.23.141.24.81.25.4 |
| GO-2023-1628 Kubernetes vulnerable to path traversal |
Medium EPSS 1.45% |
>= 1.22.0, < 1.22.16>= 1.23.0, < 1.23.14>= 1.24.0, < 1.24.8>= 1.25.0, < 1.25.4 | 1.22.161.23.141.24.81.25.4 |
| GHSA-gc2p-g4fg-29vh Kubernetes did not effectively clear service account credentials |
High EPSS 1.49% |
>= 1.13.0, < 1.13.1 | 1.13.1 |
| GHSA-gc2p-g4fg-29vh Kubernetes did not effectively clear service account credentials |
High EPSS 1.49% |
>= 1.12.0, < 1.12.5 | 1.12.5 |
| GHSA-gc2p-g4fg-29vh Kubernetes did not effectively clear service account credentials |
High EPSS 1.49% |
>= 1.12.0, < 1.12.5>= 1.13.0, < 1.13.1 | 1.12.51.13.1 |
| GHSA-mm7g-f2gg-cw8g Kubernetes arbitrary file overwrite |
Medium EPSS 1.10% |
>= 1.9.0, < 1.9.4 | 1.9.4 |
| GHSA-mm7g-f2gg-cw8g Kubernetes arbitrary file overwrite |
Medium EPSS 1.10% |
>= 1.3.0, < 1.7.14>= 1.8.0, < 1.8.9>= 1.9.0, < 1.9.4 | 1.7.141.8.91.9.4 |
| GHSA-mm7g-f2gg-cw8g Kubernetes arbitrary file overwrite |
Medium EPSS 1.10% |
>= 1.3.0, < 1.7.14 | 1.7.14 |
| GHSA-mm7g-f2gg-cw8g Kubernetes arbitrary file overwrite |
Medium EPSS 1.10% |
>= 1.8.0, < 1.8.9 | 1.8.9 |
| GHSA-2jq6-ffph-p4h8 Kubernetes arbitrary file overwrite |
Medium EPSS 1.67% |
>= 1.5.0, < 1.9.6 | 1.9.6 |
| GHSA-2jq6-ffph-p4h8 Kubernetes arbitrary file overwrite |
Medium EPSS 1.67% |
>= 1.5.0-alpha.0, < 1.9.6 | 1.9.6 |
| GHSA-q4rr-64r9-fwgf Kubernetes DoS Vulnerability |
Medium EPSS 16.93% |
>= 1.0.0, <= 1.10.14 | No fix yet |
| GHSA-q4rr-64r9-fwgf Kubernetes DoS Vulnerability |
Medium EPSS 16.93% |
>= 1.11.0, < 1.11.8 | 1.11.8 |
| GHSA-q4rr-64r9-fwgf Kubernetes DoS Vulnerability |
Medium EPSS 16.93% |
>= 1.12.0, < 1.12.6 | 1.12.6 |
| GHSA-q4rr-64r9-fwgf Kubernetes DoS Vulnerability |
Medium EPSS 16.93% |
>= 1.13.0, < 1.13.4 | 1.13.4 |
| GHSA-q4rr-64r9-fwgf Kubernetes DoS Vulnerability |
Medium EPSS 16.93% |
>= 1.0.0, < 1.11.8>= 1.12.0, < 1.12.6>= 1.13.0, < 1.13.4 | 1.11.81.12.61.13.4 |
| GHSA-2h9c-34v6-3qmr Kubernetes in OpenShift3 Access Control Misconfiguration |
Low EPSS 1.42% |
< 1.2.0-alpha.6 | 1.2.0-alpha.6 |
| GHSA-2h9c-34v6-3qmr Kubernetes in OpenShift3 Access Control Misconfiguration |
Low EPSS 1.42% |
< 1.2.0-alpha.6 | 1.2.0-alpha.6 |
| GHSA-qhm4-jxv7-j9pq Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes |
Medium EPSS 1.24% |
>= 1.16.0, < 1.16.6 | 1.16.6 |
| GHSA-qhm4-jxv7-j9pq Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes |
Medium EPSS 1.24% |
>= 1.17.0, < 1.17.2 | 1.17.2 |
| GHSA-x6mj-w4jf-jmgw Server Side Request Forgery (SSRF) in Kubernetes |
Medium EPSS 3.68% |
>= 1.18.0, < 1.18.1 | 1.18.1 |
| GHSA-x6mj-w4jf-jmgw Server Side Request Forgery (SSRF) in Kubernetes |
Medium EPSS 3.68% |
>= 1.17.0, < 1.17.4 | 1.17.4 |
| GHSA-x6mj-w4jf-jmgw Server Side Request Forgery (SSRF) in Kubernetes |
Medium EPSS 3.68% |
>= 1.16.0, < 1.16.9 | 1.16.9 |
| GHSA-x6mj-w4jf-jmgw Server Side Request Forgery (SSRF) in Kubernetes |
Medium EPSS 3.68% |
< 1.15.12 | 1.15.12 |
| GHSA-x6mj-w4jf-jmgw Server Side Request Forgery (SSRF) in Kubernetes |
Medium EPSS 3.68% |
< 1.15.12>= 1.16.0, < 1.16.9>= 1.17.0, < 1.17.4>= 1.18.0, < 1.18.1 | 1.15.121.16.91.17.41.18.1 |
| GHSA-wqv3-8cm6-h6wg Improper Authentication in Kubernetes |
High EPSS 3.42% |
>= 1.18.0, < 1.18.4 | 1.18.4 |
| GHSA-wqv3-8cm6-h6wg Improper Authentication in Kubernetes |
High EPSS 3.42% |
>= 1.17.0, < 1.17.7 | 1.17.7 |
| GHSA-wqv3-8cm6-h6wg Improper Authentication in Kubernetes |
High EPSS 3.42% |
< 1.16.11 | 1.16.11 |
| GHSA-wqv3-8cm6-h6wg Improper Authentication in Kubernetes |
High EPSS 3.42% |
< 1.16.11>= 1.17.0, < 1.17.7>= 1.18.0, < 1.18.4 | 1.16.111.17.71.18.4 |
| GHSA-wqwf-x5cj-rg56 Kubernetes Arbitrary Command Injection |
Medium EPSS 4.00% |
>= 1.9.0, < 1.9.10 | 1.9.10 |
| GHSA-wqwf-x5cj-rg56 Kubernetes Arbitrary Command Injection |
Medium EPSS 4.00% |
>= 1.10.0, < 1.10.6 | 1.10.6 |
| GHSA-wqwf-x5cj-rg56 Kubernetes Arbitrary Command Injection |
Medium EPSS 4.00% |
>= 1.11.0, < 1.11.2 | 1.11.2 |
| GHSA-wqwf-x5cj-rg56 Kubernetes Arbitrary Command Injection |
Medium EPSS 4.00% |
>= 1.9.0, < 1.9.10>= 1.10.0, < 1.10.6>= 1.11.0, < 1.11.2 | 1.9.101.10.61.11.2 |
| GHSA-jp32-vmm6-3vf5 Directory Traversal in Kubernetes |
Medium EPSS 1.85% |
< 1.1.1 | 1.1.1 |
| GHSA-qhm4-jxv7-j9pq Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes |
Medium EPSS 1.24% |
>= 1.15.0, < 1.15.10 | 1.15.10 |
| GHSA-qhm4-jxv7-j9pq Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes |
Medium EPSS 1.24% |
>= 1.15.0, < 1.15.10>= 1.16.0, < 1.16.6>= 1.17.0, < 1.17.2 | 1.15.101.16.61.17.2 |
| GHSA-34jx-wx69-9x8v Symlink Attack in kubectl cp |
Medium EPSS 12.80% |
< 1.11.9 | 1.11.9 |
| GHSA-34jx-wx69-9x8v Symlink Attack in kubectl cp |
Medium EPSS 12.80% |
>= 1.12.0, < 1.12.7 | 1.12.7 |
| GHSA-34jx-wx69-9x8v Symlink Attack in kubectl cp |
Medium EPSS 12.80% |
>= 1.13.0, < 1.13.5 | 1.13.5 |
| GHSA-34jx-wx69-9x8v Symlink Attack in kubectl cp |
Medium EPSS 12.80% |
< 1.11.9>= 1.12.0, < 1.12.7>= 1.13.0, < 1.13.5 | 1.11.91.12.71.13.5 |
| GHSA-jp32-vmm6-3vf5 Directory Traversal in Kubernetes |
Medium EPSS 1.85% |
< 1.1.1 | 1.1.1 |
| GHSA-j9wf-vvm6-4r9w Unverified Ownership in Kubernetes |
Medium EPSS 8.72% |
<= 1.22.0 | No fix yet |
| GHSA-qh36-44jv-c8xj Potential proxy IP restriction bypass in Kubernetes |
Low EPSS 1.19% |
all versions | No fix yet |
| GHSA-qh36-44jv-c8xj Potential proxy IP restriction bypass in Kubernetes |
Low EPSS 1.19% |
<= 1.18.19 | No fix yet |
| GHSA-qh36-44jv-c8xj Potential proxy IP restriction bypass in Kubernetes |
Low EPSS 1.19% |
>= 1.19.0, <= 1.19.11 | No fix yet |
| GHSA-qh36-44jv-c8xj Potential proxy IP restriction bypass in Kubernetes |
Low EPSS 1.19% |
>= 1.20.0, <= 1.20.7 | No fix yet |
| GHSA-qh36-44jv-c8xj Potential proxy IP restriction bypass in Kubernetes |
Low EPSS 1.19% |
>= 1.21.0, <= 1.21.1 | No fix yet |
| GHSA-f9jg-8p32-2f55 kubectl ANSI escape characters not filtered |
Low EPSS 0.84% |
< 1.26.0-alpha.3 | 1.26.0-alpha.3 |
| GHSA-f9jg-8p32-2f55 kubectl ANSI escape characters not filtered |
Low EPSS 0.84% |
< 1.26.0-alpha.3 | 1.26.0-alpha.3 |
| GHSA-f5f7-6478-qm6p Files or Directories Accessible to External Parties in kubernetes |
High EPSS 7.96% |
>= 1.20.0, < 1.20.11 | 1.20.11 |
| GHSA-f5f7-6478-qm6p Files or Directories Accessible to External Parties in kubernetes |
High EPSS 7.96% |
< 1.19.15>= 1.20.0, < 1.20.11>= 1.21.0, < 1.21.5>= 1.22.0, < 1.22.2 | 1.19.151.20.111.21.51.22.2 |
| GHSA-f5f7-6478-qm6p Files or Directories Accessible to External Parties in kubernetes |
High EPSS 7.96% |
>= 1.22.0, < 1.22.2 | 1.22.2 |
| GHSA-f5f7-6478-qm6p Files or Directories Accessible to External Parties in kubernetes |
High EPSS 7.96% |
>= 1.21.0, < 1.21.5 | 1.21.5 |
| GHSA-f5f7-6478-qm6p Files or Directories Accessible to External Parties in kubernetes |
High EPSS 7.96% |
< 1.19.15 | 1.19.15 |
| GHSA-vw47-mr44-3jf9 Confused Deputy in Kubernetes |
Low EPSS 1.95% |
<= 1.22.2 | No fix yet |
| GHSA-74j8-88mm-7496 Confused Deputy in Kubernetes |
Medium EPSS 2.10% |
<= 1.22.2 | No fix yet |
| GHSA-mfv7-gq43-w965 Incomplete List of Disallowed Inputs in Kubernetes |
Medium EPSS 1.33% |
>= 1.19.0, < 1.19.11 | 1.19.11 |
| GHSA-mfv7-gq43-w965 Incomplete List of Disallowed Inputs in Kubernetes |
Medium EPSS 1.33% |
>= 1.20.0, < 1.20.7 | 1.20.7 |
| GHSA-mfv7-gq43-w965 Incomplete List of Disallowed Inputs in Kubernetes |
Medium EPSS 1.33% |
>= 1.16.0, < 1.18.19>= 1.19.0, < 1.19.11>= 1.20.0, < 1.20.7>= 1.21.0, < 1.21.1 | 1.18.191.19.111.20.71.21.1 |
| GHSA-mfv7-gq43-w965 Incomplete List of Disallowed Inputs in Kubernetes |
Medium EPSS 1.33% |
>= 1.21.0, < 1.21.1 | 1.21.1 |
| GHSA-mfv7-gq43-w965 Incomplete List of Disallowed Inputs in Kubernetes |
Medium EPSS 1.33% |
>= 1.16.0, < 1.18.19 | 1.18.19 |
| GHSA-g42g-737j-qx6j Access Restriction Bypass in kube-apiserver |
Medium EPSS 5.38% |
< 1.18.18>= 1.19.0, < 1.19.10>= 1.20.0, < 1.20.6 | 1.18.181.19.101.20.6 |
| GHSA-g42g-737j-qx6j Access Restriction Bypass in kube-apiserver |
Medium EPSS 5.38% |
< 1.18.18 | 1.18.18 |
| GHSA-g42g-737j-qx6j Access Restriction Bypass in kube-apiserver |
Medium EPSS 5.38% |
>= 1.19.0, < 1.19.10 | 1.19.10 |
| GHSA-g42g-737j-qx6j Access Restriction Bypass in kube-apiserver |
Medium EPSS 5.38% |
>= 1.20.0, < 1.20.6 | 1.20.6 |
| GHSA-pmqp-h87c-mr78 XML Entity Expansion and Improper Input Validation in Kubernetes API server |
High EPSS 25.94% |
>= 1.0.0, < 1.13.12 | 1.13.12 |
| GHSA-pmqp-h87c-mr78 XML Entity Expansion and Improper Input Validation in Kubernetes API server |
High EPSS 25.94% |
>= 1.15.0, < 1.15.5 | 1.15.5 |
| GHSA-pmqp-h87c-mr78 XML Entity Expansion and Improper Input Validation in Kubernetes API server |
High EPSS 25.94% |
>= 1.16.0, < 1.16.2 | 1.16.2 |
| GHSA-pmqp-h87c-mr78 XML Entity Expansion and Improper Input Validation in Kubernetes API server |
High EPSS 25.94% |
>= 1.0.0, < 1.13.12>= 1.14.0, < 1.14.8>= 1.15.0, < 1.15.5>= 1.16.0, < 1.16.2 | 1.13.121.14.81.15.51.16.2 |
| GHSA-pmqp-h87c-mr78 XML Entity Expansion and Improper Input Validation in Kubernetes API server |
High EPSS 25.94% |
>= 1.14.0, < 1.14.8 | 1.14.8 |
| GHSA-6qfg-8799-r575 Kubernetes kubectl cp Vulnerable to Symlink Attack |
Medium EPSS 2.62% |
>= 1.13.10, < 1.13.11 | 1.13.11 |
| GHSA-6qfg-8799-r575 Kubernetes kubectl cp Vulnerable to Symlink Attack |
Medium EPSS 2.62% |
>= 1.13.10, < 1.13.11>= 1.14.6, < 1.14.7>= 1.15.3, < 1.16.0 | 1.13.111.14.71.16.0 |
| GHSA-6qfg-8799-r575 Kubernetes kubectl cp Vulnerable to Symlink Attack |
Medium EPSS 2.62% |
>= 1.15.3, < 1.16.0 | 1.16.0 |
| GHSA-6qfg-8799-r575 Kubernetes kubectl cp Vulnerable to Symlink Attack |
Medium EPSS 2.62% |
>= 1.14.6, < 1.14.7 | 1.14.7 |
| GHSA-2jx2-76rc-2v7v Kubernetes Privilege Escalation |
Critical EPSS 2.84% |
>= 1.5.0, < 1.5.5 | 1.5.5 |
| GHSA-2jx2-76rc-2v7v Kubernetes Privilege Escalation |
Critical EPSS 2.84% |
>= 1.5.0, < 1.5.5 | 1.5.5 |
| GHSA-8cfg-vx93-jvxw Kubernetes client-go vulnerable to Sensitive Information Leak via Log File |
Medium EPSS 0.52% |
< 1.20.0-alpha.2 | 1.20.0-alpha.2 |
| GHSA-8mjg-8c8g-6h85 Kubernetes Sensitive Information leak via Log File |
Medium EPSS 0.47% |
< 1.20.0-alpha.1 | 1.20.0-alpha.1 |
| GHSA-8mjg-8c8g-6h85 Kubernetes Sensitive Information leak via Log File |
Medium EPSS 0.47% |
< 1.20.0-alpha.1 | 1.20.0-alpha.1 |
| GHSA-jmrx-5g74-6v2f Kubernetes client-go library logs may disclose credentials to unauthorized users |
Medium EPSS 1.77% |
< 1.16.0-beta.1 | 1.16.0-beta.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor