Go to main page
Versions in this module
v0
Sep 22, 2026
Sep 15, 2026
Sep 22, 2026
Sep 22, 2026
Jul 2, 2026
Jun 25, 2026
Jun 23, 2026 GO-2026-6517
GO-2026-6517: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp
Jun 15, 2026 GO-2026-6517
GO-2026-6517: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp
Jul 2, 2026