Affected by GO-2022-0617 and 14 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2022-0983: ANSI escape characters not filtered in kubectl in k8s.io/kubernetes

GO-2023-1628: Kubernetes vulnerable to path traversal in k8s.io/kubernetes

GO-2023-1629: Kubernetes vulnerable to validation bypass in k8s.io/kubernetes

GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

GO-2023-1891: Vulnerable to policy bypass in kube-apiserver in k8s.io/kubernetes

GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

GO-2025-3465: Node Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes

GO-2025-3521: Kubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes

GO-2025-3522: Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes

GO-2025-3547: Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes

GO-2025-3915: Kubernetes Nodes can delete themselves by adding an OwnerReference in k8s.io/kubernetes

apis/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kubernetes/kubernetes

Links

Open Source Insights

Directories ¶

Path	Synopsis
bootstraptoken Package bootstraptoken contains an API and utilities wrapping the "bootstrap.kubernetes.io/token" Secret type to ease its usage in kubeadm.	Package bootstraptoken contains an API and utilities wrapping the "bootstrap.kubernetes.io/token" Secret type to ease its usage in kubeadm.
v1
kubeadm Package kubeadm is the package that contains the libraries that drive the kubeadm binary.	Package kubeadm is the package that contains the libraries that drive the kubeadm binary.
fuzzer
scheme
v1beta2 Package v1beta2 defines the v1beta2 version of the kubeadm configuration file format.	Package v1beta2 defines the v1beta2 version of the kubeadm configuration file format.
v1beta3 Package v1beta3 defines the v1beta3 version of the kubeadm configuration file format.	Package v1beta3 defines the v1beta3 version of the kubeadm configuration file format.
validation
output Package output implements the kubeadm structured output The purpose of the kubeadm structured output is to have a well defined versioned output format that other software that uses kubeadm for cluster deployments can use and rely on.	Package output implements the kubeadm structured output The purpose of the kubeadm structured output is to have a well defined versioned output format that other software that uses kubeadm for cluster deployments can use and rely on.
fuzzer
scheme
v1alpha1 Package v1alpha1 defines the v1alpha1 version of the kubeadm data structures related to structured output The purpose of the kubeadm structured output is to have a well defined versioned output format that other software that uses kubeadm for cluster deployments can use and rely on.	Package v1alpha1 defines the v1alpha1 version of the kubeadm data structures related to structured output The purpose of the kubeadm structured output is to have a well defined versioned output format that other software that uses kubeadm for cluster deployments can use and rely on.
v1alpha2 Package v1alpha2 defines the v1alpha2 version of the kubeadm data structures related to structured output The purpose of the kubeadm structured output is to have a well defined versioned output format that other software that uses kubeadm for cluster deployments can use and rely on.	Package v1alpha2 defines the v1alpha2 version of the kubeadm data structures related to structured output The purpose of the kubeadm structured output is to have a well defined versioned output format that other software that uses kubeadm for cluster deployments can use and rely on.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL