Affected by GO-2022-0617 and 16 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

images/

Details

Path	Synopsis
agnhost
apparmor-loader
audit-proxy
crd-conversion-webhook
converter
entrypoint-tester
fakegitserver
liveness A simple server that is alive for 10 seconds, then reports unhealthy for the rest of its (hopefully) short existence.	A simple server that is alive for 10 seconds, then reports unhealthy for the rest of its (hopefully) short existence.
logs-generator
metadata-concealment
mounttest
net
common
nat
netexec
nettest A tiny web server for checking networking connectivity.	A tiny web server for checking networking connectivity.
no-snat-test
no-snat-test-proxy
nonewprivs
pets
peer-finder A small utility program to lookup hostnames of endpoints in a service.	A small utility program to lookup hostnames of endpoints in a service.
port-forward-tester A tiny binary for testing port forwarding.	A tiny binary for testing port forwarding.
porter A tiny binary for testing ports.	A tiny binary for testing ports.
regression-issue-74839
resource-consumer
common
consume-cpu
resource-consumer-controller
sample-device-plugin
serve-hostname A small utility to just serve the hostname on TCP and/or UDP.	A small utility to just serve the hostname on TCP and/or UDP.
test-webserver A tiny web server that serves a static file.	A tiny web server that serves a static file.
webhook