bootstraptoken

Feb 5, 2025 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 25, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jan 15, 2025 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 5, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 3, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 26, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 5, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 29, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 17, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 1, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jan 15, 2025 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 19, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 13, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 6, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 2, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 18, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 25, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jan 15, 2025 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 19, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 17, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Apr 2, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 26, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Feb 27, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Feb 13, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jan 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 20, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jan 15, 2025 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 20, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 13, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 28, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 21, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 2, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 10, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 25, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 25, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 15, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 10, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 25, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 21, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 6, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 20, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 8, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 30, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 23, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 17, 2024 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 14, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 11, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 6, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 23, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 2, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 24, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 14, 2024 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +7 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +7 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 12, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 30, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 10, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 1, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 11, 2022 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 20, 2022 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 9, 2022 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 23, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 12, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 23, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 23, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 16, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 9, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 4, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 28, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 15, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 23, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 12, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 3, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 3, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 26, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 19, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 31, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 22, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 15, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 1, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 24, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 25, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 25, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 24, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 2, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 28, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 19, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 20, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 19, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 19, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 4, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 4, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 21, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 14, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 8, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes