Affected by GO-2024-3325 and 2 other vulnerabilities

GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp

GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

apis/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kcp-dev/kcp

Links

Open Source Insights

Directories ¶

Path	Synopsis
apiresource
v1alpha1 +k8s:deepcopy-gen=package,register +groupName=apiresource.kcp.dev	+k8s:deepcopy-gen=package,register +groupName=apiresource.kcp.dev
cluster
v1alpha1 +k8s:deepcopy-gen=package,register +groupName=cluster.example.dev	+k8s:deepcopy-gen=package,register +groupName=cluster.example.dev
tenancy
v1alpha1 +k8s:deepcopy-gen=package,register +groupName=tenancy.kcp.dev +k8s:openapi-gen=true	+k8s:deepcopy-gen=package,register +groupName=tenancy.kcp.dev +k8s:openapi-gen=true
v1alpha1/helper

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL