meta

May 12, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 4, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 1, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 29, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

type DefaultRESTMapper

+ func (m *DefaultRESTMapper) AddResourceAlias(alias string, resources ...string)

+ func (m *DefaultRESTMapper) AliasesForResource(alias string) ([]string, bool)

type Interface

+ GenerateName func() string

+ SetGenerateName func(name string)

type MetadataAccessor

+ GenerateName func(obj runtime.Object) (string, error)

+ SetGenerateName func(obj runtime.Object, name string) error

+ type MultiRESTMapper []RESTMapper

+ func (m MultiRESTMapper) AliasesForResource(alias string) (aliases []string, ok bool)

+ func (m MultiRESTMapper) RESTMapping(kind string, versions ...string) (mapping *RESTMapping, err error)

+ func (m MultiRESTMapper) VersionAndKindForResource(resource string) (defaultVersion, kind string, err error)

type RESTMapper

+ AliasesForResource func(resource string) ([]string, bool)

Apr 1, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 30, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 17, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 11, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 3, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 3, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

+ var RESTScopeNamespace = &restScope

+ var RESTScopeNamespaceLegacy = &restScope

+ var RESTScopeRoot = &restScope

type RESTMapping

+ Scope RESTScope

+ type RESTScope interface

+ Name func() RESTScopeName

+ ParamDescription func() string

+ ParamName func() string

+ ParamPath func() bool

+ type RESTScopeName string

+ const RESTScopeNameNamespace

+ const RESTScopeNameRoot

Jan 28, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 23, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 21, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

+ type TypeInterface interface

+ APIVersion func() string

+ Kind func() string

+ SetAPIVersion func(version string)

+ SetKind func(kind string)

+ func TypeAccessor(obj interface{}) (TypeInterface, error)

Jan 20, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 7, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 9, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 8, 2015 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 29, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 23, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 12, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 9, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 2, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

type Interface

+ Annotations func() map[string]string

+ Labels func() map[string]string

+ SetAnnotations func(annotations map[string]string)

+ SetLabels func(labels map[string]string)

type MetadataAccessor

+ Annotations func(obj runtime.Object) (map[string]string, error)

+ Labels func(obj runtime.Object) (map[string]string, error)

+ SetAnnotations func(obj runtime.Object, annotations map[string]string) error

+ SetLabels func(obj runtime.Object, labels map[string]string) error

Dec 2, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 25, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 24, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 19, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 18, 2014 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0701: Directory traversal in k8s.io/kubernetes

  GO-2022-0782: Symlink Attack in kubectl cp in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-1985: Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

+ type DefaultRESTMapper struct

+ func NewDefaultRESTMapper(versions []string, f VersionInterfacesFunc) *DefaultRESTMapper

+ func (m *DefaultRESTMapper) Add(scheme *runtime.Scheme, mixedCase bool, versions ...string)

+ func (m *DefaultRESTMapper) RESTMapping(version, kind string) (*RESTMapping, error)

+ func (m *DefaultRESTMapper) VersionAndKindForResource(resource string) (defaultVersion, kind string, err error)

+ type Interface interface

+ APIVersion func() string

+ Kind func() string

+ Name func() string

+ Namespace func() string

+ ResourceVersion func() string

+ SelfLink func() string

+ SetAPIVersion func(version string)

+ SetKind func(kind string)

+ SetName func(name string)

+ SetNamespace func(namespace string)

+ SetResourceVersion func(version string)

+ SetSelfLink func(selfLink string)

+ SetUID func(uid string)

+ UID func() string

+ func Accessor(obj interface{}) (Interface, error)

+ type MetadataAccessor interface

+ APIVersion func(obj runtime.Object) (string, error)

+ Kind func(obj runtime.Object) (string, error)

+ Name func(obj runtime.Object) (string, error)

+ Namespace func(obj runtime.Object) (string, error)

+ SelfLink func(obj runtime.Object) (string, error)

+ SetAPIVersion func(obj runtime.Object, version string) error

+ SetKind func(obj runtime.Object, kind string) error

+ SetName func(obj runtime.Object, name string) error

+ SetNamespace func(obj runtime.Object, namespace string) error

+ SetSelfLink func(obj runtime.Object, selfLink string) error

+ SetUID func(obj runtime.Object, uid string) error

+ UID func(obj runtime.Object) (string, error)

+ func NewAccessor() MetadataAccessor

+ type RESTMapper interface

+ RESTMapping func(version, kind string) (*RESTMapping, error)

+ VersionAndKindForResource func(resource string) (defaultVersion, kind string, err error)

+ type RESTMapping struct

+ APIVersion string

+ Kind string

+ Resource string

+ type VersionInterfaces struct

+ type VersionInterfacesFunc func(apiVersion string) (*VersionInterfaces, bool)