Affected by GO-2022-0617 and 11 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

GO-2023-2170: Kubernetes privilege escalation vulnerability in k8s.io/kubernetes

GO-2023-2330: Kubernetes privilege escalation vulnerability in k8s.io/kubernetes

GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

apis/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/kubernetes/kubernetes

Links

Open Source Insights

Directories ¶

Path	Synopsis
abac
fuzzer
latest
v0
v1beta1
admission
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
admissionregistration Package admissionregistration is the internal version of the API.	Package admissionregistration is the internal version of the API.
fuzzer
install
v1 Package v1 is the v1 version of the API.	Package v1 is the v1 version of the API.
v1beta1 Package v1beta1 is the v1beta1 version of the API.	Package v1beta1 is the v1beta1 version of the API.
validation
apiserverinternal Package apiserverinternal contains the "internal" version of the API used by the apiservers themselves.	Package apiserverinternal contains the "internal" version of the API used by the apiservers themselves.
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1alpha1 Package v1alpha1 contains the v1alpha1 version of the API used by the apiservers themselves.	Package v1alpha1 contains the v1alpha1 version of the API used by the apiservers themselves.
validation
apps
fuzzer
install Package install installs the apps API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the apps API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
v1beta2
validation
authentication
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation Package validation contains methods to validate kinds in the authentication.k8s.io API group.	Package validation contains methods to validate kinds in the authentication.k8s.io API group.
authorization
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation
autoscaling
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v2beta1
v2beta2
validation
batch
fuzzer
install Package install installs the batch API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the batch API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation
certificates
fuzzer
install Package install installs the certificates API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the certificates API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation
coordination
install Package install installs the coordination API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the coordination API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation
core Package core contains the latest (or "internal") version of the Kubernetes API objects.	Package core contains the latest (or "internal") version of the Kubernetes API objects.
fuzzer
helper
helper/qos NOTE: DO NOT use those helper functions through client-go, the package path will be changed in the future.	NOTE: DO NOT use those helper functions through client-go, the package path will be changed in the future.
install Package install installs the v1 monolithic api, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the v1 monolithic api, making it available as an option to all of the API encoding/decoding machinery.
pods
v1 Package v1 is the v1 version of the API.	Package v1 is the v1 version of the API.
v1/helper
v1/helper/qos
v1/validation
validation Package validation has functions for validating the correctness of api objects and explaining what is wrong with them when they aren't valid.	Package validation has functions for validating the correctness of api objects and explaining what is wrong with them when they aren't valid.
discovery
fuzzer
install Package install installs the discovery API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the discovery API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation
events
install Package install installs the events API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the events API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
extensions
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1beta1
flowcontrol Package flowcontrol provides api definitions for the "flowcontrol.apiserver.k8s.io" api group.	Package flowcontrol provides api definitions for the "flowcontrol.apiserver.k8s.io" api group.
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
internalbootstrap
util
v1alpha1
v1beta1
validation
imagepolicy
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1alpha1
networking
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation
node
install Package install adds the node API group, making it available as an option to all of the API encoding/decoding machinery.	Package install adds the node API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1alpha1
v1beta1
validation
policy
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1 Package policy is for any kind of policy object.	Package policy is for any kind of policy object.
v1beta1 Package policy is for any kind of policy object.	Package policy is for any kind of policy object.
validation
rbac
fuzzer
install Package install installs the batch API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the batch API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1alpha1
v1beta1
validation
scheduling
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
util
v1
v1alpha1
v1beta1
validation
storage
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
util
v1
v1/util
v1alpha1
v1beta1
v1beta1/util
validation

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL