plugin

Nov 25, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 5, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 3, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 26, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 5, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 29, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 17, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 1, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 19, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 13, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Changes in this version

type Plugin

+ func (p *Plugin) NodePrepareResources(ctx context.Context, req *drapb.NodePrepareResourcesRequest, ...) (*drapb.NodePrepareResourcesResponse, error)

+ func (p *Plugin) NodeUnprepareResources(ctx context.Context, req *drapb.NodeUnprepareResourcesRequest, ...) (*drapb.NodeUnprepareResourcesResponse, error)

Aug 6, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 2, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 18, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 25, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 19, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 17, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Apr 2, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 26, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Feb 27, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Feb 13, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jan 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 20, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 20, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 13, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 28, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 21, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 2, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 10, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 25, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 25, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 15, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 10, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 25, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 21, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 6, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 20, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 8, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 30, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 23, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 17, 2024 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 14, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 11, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

+ const PluginClientTimeout

Apr 6, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 23, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 2, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 24, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 14, 2024 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +7 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +7 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 12, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

+ const DRAPluginName

+ type Client interface

+ NodePrepareResource func(ctx context.Context, namespace string, claimUID types.UID, claimName string, ...) (*drapbv1.NodePrepareResourceResponse, error)

+ NodeUnprepareResource func(ctx context.Context, namespace string, claimUID types.UID, claimName string, ...) (*drapbv1.NodeUnprepareResourceResponse, error)

+ func NewDRAPluginClient(pluginName string) (Client, error)

+ type Plugin struct

+ type PluginsStore struct

+ func (s *PluginsStore) Clear()

+ func (s *PluginsStore) Delete(pluginName string)

+ func (s *PluginsStore) Get(pluginName string) *Plugin

+ func (s *PluginsStore) Set(pluginName string, plugin *Plugin)

+ type RegistrationHandler struct

+ func NewRegistrationHandler() *RegistrationHandler

+ func (h *RegistrationHandler) DeRegisterPlugin(pluginName string)

+ func (h *RegistrationHandler) RegisterPlugin(pluginName string, endpoint string, versions []string) error

+ func (h *RegistrationHandler) ValidatePlugin(pluginName string, endpoint string, versions []string) error

Nov 30, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes