reconcilers

Nov 25, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 5, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 3, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 26, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 5, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 29, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 17, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 1, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 19, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 13, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 6, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 2, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 18, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 25, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 19, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 17, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Apr 2, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 26, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Mar 12, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Feb 27, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Feb 13, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jan 30, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 20, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Dec 10, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 20, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 13, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 28, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 21, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Nov 2, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 10, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 25, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 25, 2023 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Oct 22, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Sep 11, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Aug 14, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jul 16, 2024 GO-2022-0617

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 15, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 10, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 25, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 21, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 6, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 20, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 8, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 30, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 23, 2023 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 17, 2024 GO-2022-0617 +1 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 11, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 14, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 16, 2024 GO-2022-0617 +2 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 14, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 11, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 6, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 23, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 2, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 24, 2023 GO-2022-0617 +3 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 14, 2024 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 14, 2024 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 17, 2024 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 19, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 24, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +7 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +7 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +9 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 12, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 30, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 10, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 1, 2022 GO-2022-0617 +4 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 11, 2022 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 20, 2022 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 9, 2022 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 15, 2023 GO-2022-0617 +5 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 18, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 13, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 23, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 12, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 23, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 23, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

type EndpointReconciler

+ Destroy func()

type Leases

+ Destroy func()

Aug 16, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 9, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 4, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 28, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 15, 2022 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 23, 2023 GO-2022-0617 +6 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 19, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 14, 2023 GO-2022-0617 +8 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 17, 2023 GO-2022-0617 +10 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 12, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 15, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 3, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 3, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 26, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 19, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 31, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 22, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 15, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 1, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 24, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 22, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 18, 2023 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 12, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 25, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 25, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 7, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 24, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 2, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 28, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 19, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 20, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 9, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 21, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 14, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 17, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 13, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 19, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 19, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 4, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 4, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

  GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 21, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 14, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 8, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 22, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 8, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 20, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 28, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 26, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 15, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 24, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 13, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 13, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 16, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 16, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 15, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 15, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +11 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 11, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 11, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 8, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 8, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 26, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 9, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 23, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 9, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 26, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 1, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 19, 2022 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 15, 2021 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 11, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Aug 11, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jul 15, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jun 16, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

May 12, 2021 GO-2022-0617 +13 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 15, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Apr 15, 2021 GO-2022-0617 +14 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 18, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Mar 18, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 18, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 18, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 17, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Feb 17, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Jan 13, 2021 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2020 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 18, 2020 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 8, 2020 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2020 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Dec 4, 2020 GO-2022-0617 +15 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

  GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

  GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Changes in this version

+ const LeaseEndpointReconcilerType

+ const MasterCountReconcilerType

+ const NoneEndpointReconcilerType

+ var AllTypes = Types

+ func GetMasterServiceUpdateIfNeeded(svc *corev1.Service, servicePorts []corev1.ServicePort, ...) (s *corev1.Service, updated bool)

+ type EndpointReconciler interface

+ ReconcileEndpoints func(serviceName string, ip net.IP, endpointPorts []corev1.EndpointPort, ...) error

+ RemoveEndpoints func(serviceName string, ip net.IP, endpointPorts []corev1.EndpointPort) error

+ StopReconciling func()

+ func NewLeaseEndpointReconciler(epAdapter EndpointsAdapter, masterLeases Leases) EndpointReconciler

+ func NewMasterCountEndpointReconciler(masterCount int, epAdapter EndpointsAdapter) EndpointReconciler

+ func NewNoneEndpointReconciler() EndpointReconciler

+ type EndpointsAdapter struct

+ func NewEndpointsAdapter(endpointClient corev1client.EndpointsGetter, ...) EndpointsAdapter

+ func (adapter *EndpointsAdapter) Create(namespace string, endpoints *corev1.Endpoints) (*corev1.Endpoints, error)

+ func (adapter *EndpointsAdapter) EnsureEndpointSliceFromEndpoints(namespace string, endpoints *corev1.Endpoints) error

+ func (adapter *EndpointsAdapter) Get(namespace, name string, getOpts metav1.GetOptions) (*corev1.Endpoints, error)

+ func (adapter *EndpointsAdapter) Update(namespace string, endpoints *corev1.Endpoints) (*corev1.Endpoints, error)

+ type Leases interface

+ ListLeases func() ([]string, error)

+ RemoveLease func(ip string) error

+ UpdateLease func(ip string) error

+ func NewLeases(storage storage.Interface, baseKey string, leaseTime time.Duration) Leases

+ type Type string

+ type Types []Type

+ func (t Types) Names() []string

Dec 1, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 17, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Nov 3, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 27, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 20, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Oct 9, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes

Sep 22, 2020 GO-2022-0617 +12 more

  GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

  GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

  GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

  GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

  GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

  GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

  GO-2023-2170: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils

  GO-2023-2330: Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes

  GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

  GO-2024-2746: Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

  GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

  GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

  GO-2024-3286: Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes