testing

Nov 24, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 25, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 25, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

+ type MockHost struct

+ func NewMockHost(ctrl *gomock.Controller) *MockHost

+ func (m *MockHost) EXPECT() *MockHostMockRecorder

+ func (m *MockHost) GetNetNS(containerID string) (string, error)

+ func (m *MockHost) GetPodPortMappings(containerID string) ([]*hostport.PortMapping, error)

+ type MockHostMockRecorder struct

+ func (mr *MockHostMockRecorder) GetNetNS(containerID interface{}) *gomock.Call

+ func (mr *MockHostMockRecorder) GetPodPortMappings(containerID interface{}) *gomock.Call

+ type MockNamespaceGetter struct

+ func NewMockNamespaceGetter(ctrl *gomock.Controller) *MockNamespaceGetter

+ func (m *MockNamespaceGetter) EXPECT() *MockNamespaceGetterMockRecorder

+ func (m *MockNamespaceGetter) GetNetNS(containerID string) (string, error)

+ type MockNamespaceGetterMockRecorder struct

+ func (mr *MockNamespaceGetterMockRecorder) GetNetNS(containerID interface{}) *gomock.Call

+ type MockNetworkPluginMockRecorder struct

+ func (mr *MockNetworkPluginMockRecorder) Capabilities() *gomock.Call

+ func (mr *MockNetworkPluginMockRecorder) Event(name, details interface{}) *gomock.Call

+ func (mr *MockNetworkPluginMockRecorder) GetPodNetworkStatus(namespace, name, podSandboxID interface{}) *gomock.Call

+ func (mr *MockNetworkPluginMockRecorder) Init(host, hairpinMode, nonMasqueradeCIDR, mtu interface{}) *gomock.Call

+ func (mr *MockNetworkPluginMockRecorder) Name() *gomock.Call

+ func (mr *MockNetworkPluginMockRecorder) SetUpPod(namespace, name, podSandboxID, annotations, options interface{}) *gomock.Call

+ func (mr *MockNetworkPluginMockRecorder) Status() *gomock.Call

+ func (mr *MockNetworkPluginMockRecorder) TearDownPod(namespace, name, podSandboxID interface{}) *gomock.Call

+ type MockPortMappingGetter struct

+ func NewMockPortMappingGetter(ctrl *gomock.Controller) *MockPortMappingGetter

+ func (m *MockPortMappingGetter) EXPECT() *MockPortMappingGetterMockRecorder

+ func (m *MockPortMappingGetter) GetPodPortMappings(containerID string) ([]*hostport.PortMapping, error)

+ type MockPortMappingGetterMockRecorder struct

+ func (mr *MockPortMappingGetterMockRecorder) GetPodPortMappings(containerID interface{}) *gomock.Call

Dec 4, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 24, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 2, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 28, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 19, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 20, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 19, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 19, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 4, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 4, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 21, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 14, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 8, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 22, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 8, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 20, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 28, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 26, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 13, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 13, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 15, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 15, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 11, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 11, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 8, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 8, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 26, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 9, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 23, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 9, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 26, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 1, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 11, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 11, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 15, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 15, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 18, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 18, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 18, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 18, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 17, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 17, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2020 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2020 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2020 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2020 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2020 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 1, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 3, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 20, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 9, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 22, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 9, 2020 GO-2021-0066 +13 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2021-0066 +13 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2021-0066 +13 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2021-0066 +13 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2021-0066 +13 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 11, 2021 GO-2021-0066 +14 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 11, 2021 GO-2021-0066 +14 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2021 GO-2021-0066 +14 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2021 GO-2021-0066 +14 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2021-0066 +14 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2021-0066 +14 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2021-0066 +14 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2021-0066 +14 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 15, 2021 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 15, 2021 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 18, 2021 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 18, 2021 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 17, 2021 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 17, 2021 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2020 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2020 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 9, 2020 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2020 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2020 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 11, 2020 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 11, 2020 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 14, 2020 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 14, 2020 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 16, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 16, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 9, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 9, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 26, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 26, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 4, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 29, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 21, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 14, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 9, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 12, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 4, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 19, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 5, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 21, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 25, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 18, 2020 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2021-0066 +15 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 15, 2021 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 15, 2021 GO-2021-0066 +16 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 18, 2021 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 18, 2021 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 17, 2021 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 17, 2021 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 9, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 12, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 12, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 5, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 11, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 15, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 15, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 16, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 16, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 13, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 13, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 13, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 12, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 12, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2020 GO-2021-0066 +19 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2020 GO-2021-0066 +19 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 26, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 26, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 25, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 17, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 17, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 20, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 20, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 8, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 8, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 25, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 25, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 17, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 10, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 26, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 18, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 12, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 12, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 4, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 21, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2019 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 29, 2019 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 9, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 11, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 11, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 15, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 15, 2020 GO-2021-0066 +17 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 16, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 16, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 13, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 13, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 13, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 12, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 12, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 26, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 26, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 25, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 17, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 17, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 20, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 20, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 12, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 12, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 11, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 11, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 14, 2020 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 11, 2020 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 6, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 3, 2019 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 22, 2019 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2019 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 5, 2019 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 29, 2019 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 22, 2019 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 15, 2019 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 2, 2019 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 13, 2019 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 2, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 2, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 13, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 13, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2020 GO-2021-0066 +18 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 26, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 26, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 25, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 17, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 17, 2020 GO-2021-0066 +20 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 20, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 20, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 12, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 12, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 11, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 11, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 11, 2020 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 11, 2020 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 11, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 11, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 11, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 13, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 10, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 15, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 2, 2019 GO-2021-0066 +24 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 1, 2019 GO-2021-0066 +24 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 18, 2019 GO-2021-0066 +24 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2019 GO-2021-0066 +24 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 10, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 4, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 20, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 13, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 7, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 30, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 17, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 6, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 6, 2020 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 12, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 12, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 11, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 11, 2020 GO-2021-0066 +22 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2020 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2020 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 11, 2020 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 11, 2020 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 11, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 11, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 11, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 13, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 15, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 18, 2019 GO-2021-0066 +24 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2019 GO-2021-0066 +24 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 19, 2019 GO-2021-0066 +24 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 16, 2019 GO-2021-0066 +24 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 5, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 1, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 18, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 10, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 19, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2019 GO-2021-0066 +23 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0703: XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

  GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 11, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 5, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 28, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 7, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 29, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2019 GO-2021-0066 +21 more

  GO-2021-0066: Sensitive information leak via log file in k8s.io/kubernetes

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

  GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

  GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

  GO-2024-2754: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes