Affected by GO-2022-0617 and 23 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2022-0802: Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

GO-2022-0867: Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

GO-2022-0885: Improper Authentication in Kubernetes in k8s.io/kubernetes

GO-2022-0890: Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

GO-2022-0983: ANSI escape characters not filtered in kubectl in k8s.io/kubernetes

GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

GO-2023-1891: Vulnerable to policy bypass in kube-apiserver in k8s.io/kubernetes

GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

GO-2024-2748: Privilege Escalation in Kubernetes in k8s.io/apimachinery

GO-2024-2753: Denial of service in Kubernetes in k8s.io/kubernetes

GO-2024-2754: Sensitive Information leak for users of Ceph RBD via Log File in k8s.io/kubernetes

GO-2024-2755: Sensitive Information leak for VSphere users via Log File in k8s.io/kubernetes

GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

GO-2025-3465: Node Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes

GO-2025-3521: Kubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes

GO-2025-3522: Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes

GO-2025-3547: Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes

GO-2025-3915: Kubernetes Nodes can delete themselves by adding an OwnerReference in k8s.io/kubernetes

apis/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kubernetes/kubernetes

Links

Open Source Insights

Directories ¶

Path	Synopsis
abac
fuzzer
latest
v0
v1beta1
admission
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1beta1
admissionregistration Package admissionregistration is the internal version of the API.	Package admissionregistration is the internal version of the API.
fuzzer
install
v1beta1 Package v1beta1 is the v1beta1 version of the API.	Package v1beta1 is the v1beta1 version of the API.
validation
apps
fuzzer
install Package install installs the apps API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the apps API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
v1beta2
validation
auditregistration
fuzzer
install Package install adds the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install adds the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1alpha1
validation
authentication
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation Package validation contains methods to validate kinds in the authentication.k8s.io API group.	Package validation contains methods to validate kinds in the authentication.k8s.io API group.
authorization
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation
autoscaling
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v2beta1
v2beta2
validation
batch
fuzzer
install Package install installs the batch API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the batch API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
v2alpha1
validation
certificates
fuzzer
install Package install installs the certificates API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the certificates API group, making it available as an option to all of the API encoding/decoding machinery.
v1beta1
validation
coordination
install Package install installs the coordination API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the coordination API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation
core Package api contains the latest (or "internal") version of the Kubernetes API objects.	Package api contains the latest (or "internal") version of the Kubernetes API objects.
fuzzer
helper
helper/qos NOTE: DO NOT use those helper functions through client-go, the package path will be changed in the future.	NOTE: DO NOT use those helper functions through client-go, the package path will be changed in the future.
install Package install installs the v1 monolithic api, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the v1 monolithic api, making it available as an option to all of the API encoding/decoding machinery.
pods
v1 Package v1 is the v1 version of the API.	Package v1 is the v1 version of the API.
v1/helper
v1/helper/qos
v1/validation
validation Package validation has functions for validating the correctness of api objects and explaining what is wrong with them when they aren't valid.	Package validation has functions for validating the correctness of api objects and explaining what is wrong with them when they aren't valid.
events
install Package install installs the events API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the events API group, making it available as an option to all of the API encoding/decoding machinery.
v1beta1
extensions
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1beta1
imagepolicy
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1alpha1
networking
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1beta1
validation
node
install Package install adds the node API group, making it available as an option to all of the API encoding/decoding machinery.	Package install adds the node API group, making it available as an option to all of the API encoding/decoding machinery.
v1alpha1
v1beta1
validation
policy
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
v1beta1 Package policy is for any kind of policy object.	Package policy is for any kind of policy object.
validation
rbac
fuzzer
install Package install installs the batch API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the batch API group, making it available as an option to all of the API encoding/decoding machinery.
v1
v1alpha1
v1beta1
validation
scheduling
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
util
v1
v1alpha1
v1beta1
validation
settings
fuzzer
install Package install installs the settings API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the settings API group, making it available as an option to all of the API encoding/decoding machinery.
v1alpha1
validation
storage
fuzzer
install Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.	Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
util
v1
v1/util
v1alpha1
v1beta1
v1beta1/util
validation

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL