k8s.io/kubernetes vulnerabilities (Go)

50 vulnerabilities.

• k8s.io/kubernetes Go Portworx Half-Blind SSRF in kube-controller-manager CVE-2025-13281 Fix available 5.8 MediumDecember 12, 2025
• k8s.io/kubernetes Go Nodes can delete themselves by adding an OwnerReference CVE-2025-5187 Fix available 6.7 MediumAugust 27, 2025
• k8s.io/kubernetes Go Nodes can bypass dynamic resource allocation authorization checks CVE-2025-4563 Fix available 2.7 LowJune 23, 2025
• k8s.io/kubernetes Go Network restriction bypass via race condition during namespace termination CVE-2024-7598 Fix available 3.1 LowMarch 20, 2025
• k8s.io/kubernetes Go Kubernetes GitRepo Volume Inadvertent Local Repository Access CVE-2025-1767 Fix available 6.5 MediumMarch 13, 2025
• k8s.io/kubernetes Go Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API CVE-2024-9042 Fix available 5.9 MediumMarch 13, 2025
• k8s.io/kubernetes Go Node Denial of Service via kubelet Checkpoint API CVE-2025-0426 Fix available 6.2 MediumFebruary 13, 2025
• k8s.io/kubernetes Go Arbitrary command execution through gitRepo volume CVE-2024-10220 Public exploitFix available 8.1 HighNovember 22, 2024
• k8s.io/kubernetes Go Incorrect permissions on Windows containers logs CVE-2024-5321 Fix available 6.1 MediumJuly 18, 2024
• k8s.io/kubernetes Go Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin CVE-2024-3177 Public exploitFix available 2.7 LowApril 22, 2024
• k8s.io/kubernetes Go Kube-controller-manager: malformed hpa v1 manifest causes crash CVE-2024-0793 Fix available 7.7 HighApril 8, 2024
• k8s.io/kubernetes Go Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation CVE-2023-5528 Fix available 7.2 HighNovember 14, 2023
• k8s.io/kubernetes Go Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation CVE-2023-3955 Fix available 8.8 HighOctober 31, 2023
• k8s.io/kubernetes Go Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation CVE-2023-3676 Fix available EPSS 13.2% 8.8 HighOctober 31, 2023
• k8s.io/kubernetes Go Windows kube-proxy LoadBalancer contention CVE-2021-25736 Fix available 5.8 MediumOctober 30, 2023
• k8s.io/kubernetes Go Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin CVE-2023-2728 Public exploitFix available 6.5 MediumJune 19, 2023
• k8s.io/kubernetes Go Bypassing policies imposed by the ImagePolicyWebhook admission plugin CVE-2023-2727 Fix available 6.5 MediumJune 19, 2023
• k8s.io/kubernetes Go Bypass of seccomp profile enforcement CVE-2023-2431 Fix available 3.4 LowJune 16, 2023
• k8s.io/kubernetes Go Node address isn't always verified when proxying CVE-2022-3294 Public exploitFix available 6.6 MediumMarch 1, 2023
• k8s.io/kubernetes Go Unauthorized read of Custom Resources CVE-2022-3162 Fix available 6.5 MediumMarch 1, 2023
• k8s.io/kubernetes Go Bypass of Kubernetes API Server proxy TOCTOU CVE-2020-8562 Fix available 2.2 LowFebruary 1, 2022
• k8s.io/kubernetes Go ANSI escape characters in kubectl output are not being filtered CVE-2021-25743 Fix available 3.0 LowJanuary 7, 2022
• k8s.io/kubernetes Go Symlink Exchange Can Allow Host Filesystem Access CVE-2021-25741 Public exploitFix available 8.8 HighSeptember 20, 2021
• k8s.io/kubernetes Go Holes in EndpointSlice Validation Enable Host Network Hijack CVE-2021-25740 Fix available 3.1 LowSeptember 20, 2021
• k8s.io/kubernetes Go Webhook redirect in kube-apiserver CVE-2020-8561 Fix available 4.1 MediumSeptember 20, 2021
• k8s.io/kubernetes Go Holes in EndpointSlice Validation Enable Host Network Hijack CVE-2021-25737 Fix available 2.7 LowSeptember 6, 2021
• k8s.io/kubernetes Go Validating Admission Webhook does not observe some previous fields CVE-2021-25735 Public exploitFix available 6.5 MediumMay 28, 2021
• k8s.io/kubernetes Go Kubernetes man in the middle using LoadBalancer or ExternalIPs CVE-2020-8554 Public exploitFix available 6.3 MediumJanuary 21, 2021
• k8s.io/kubernetes Go Secret leaks in logs for vSphere Provider kube-controller-manager CVE-2020-8563 Fix available 4.7 MediumDecember 7, 2020
• k8s.io/kubernetes Go Docker config secrets leaked when file is malformed and loglevel >= 4 CVE-2020-8564 Fix available 4.7 MediumDecember 7, 2020
• k8s.io/kubernetes Go Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9 CVE-2020-8565 Fix available 4.7 MediumDecember 7, 2020
• k8s.io/kubernetes Go Ceph RBD adminSecrets exposed in logs when loglevel >= 4 CVE-2020-8566 Fix available 4.7 MediumDecember 7, 2020
• k8s.io/kubernetes Go Kubernetes node setting allows for neighboring hosts to bypass localhost boundary CVE-2020-8558 Public exploitFix available 5.4 MediumJuly 27, 2020
• k8s.io/kubernetes Go Kubernetes node disk Denial of Service by writing to container /etc/hosts CVE-2020-8557 Fix available 5.5 MediumJuly 23, 2020
• k8s.io/kubernetes Go Privilege escalation from compromised node to cluster CVE-2020-8559 Public exploitFix available 6.4 MediumJuly 22, 2020
• k8s.io/kubernetes Go Kubernetes kube-controller-manager SSRF CVE-2020-8555 Fix available 6.3 MediumJune 4, 2020
• k8s.io/kubernetes Go Kubernetes kubelet denial of service CVE-2020-8551 Fix available 4.3 MediumMarch 27, 2020
• k8s.io/kubernetes Go kubectl cp allows symlink directory traversal CVE-2019-11251 Fix available 4.8 MediumFebruary 3, 2020
• k8s.io/kubernetes Go Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack CVE-2019-11253 Fix available EPSS 25.9% 7.5 HighOctober 17, 2019
• k8s.io/kubernetes Go Kubernetes client-go logs authorization headers at debug verbosity levels CVE-2019-11250 Fix available 4.7 MediumAugust 29, 2019
• k8s.io/kubernetes Go kubelet-started container uid changes to root after first restart or if image is already pulled to the node CVE-2019-11245 Fix available 4.9 MediumAugust 29, 2019
• k8s.io/kubernetes Go Kubernetes did not effectively clear service account credentials CVE-2019-11243 Fix available 3.1 LowApril 22, 2019
• k8s.io/kubernetes Go kubectl cp path traversal CVE-2019-1002101 Public exploitFix available EPSS 12.8% 6.4 MediumApril 1, 2019
• k8s.io/kubernetes Go Kubernetes DoS Vulnerability CVE-2019-1002100 Fix available EPSS 16.9% 6.5 MediumApril 1, 2019
• k8s.io/kubernetes Go Kubernetes Arbitrary Command Injection CVE-2018-1002101 Fix available 5.9 MediumDecember 5, 2018
• k8s.io/kubernetes Go Kubernetes arbitrary file overwrite CVE-2018-1002100 Fix available 4.2 MediumJune 1, 2018
• k8s.io/kubernetes Go Kubernetes arbitrary file overwrite CVE-2017-1002102 Fix available 7.1 HighMarch 13, 2018
• k8s.io/kubernetes Go Kubernetes in OpenShift3 Access Control Misconfiguration CVE-2015-7561 Fix available 3.1 LowAugust 7, 2017
• k8s.io/kubernetes Go Kubernetes Privilege Escalation CVE-2017-1000056 Fix available 9.8 CriticalJuly 13, 2017
• k8s.io/kubernetes Go Directory Traversal in Kubernetes CVE-2015-5305 Fix available 6.4 MediumNovember 6, 2015