Github.com/kubernetes/kubernetes

This hub aggregates every CVE we track for Github.com/kubernetes/kubernetes, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 9 most recently published vulnerabilities affecting Github.com/kubernetes/kubernetes.

• CVE-2022-3294Node address isn't always verified when proxying6.6Mar 1, 2023
• CVE-2022-3162Unauthorized read of Custom Resources6.5Mar 1, 2023
• CVE-2020-8563Secret leaks in logs for vSphere Provider kube-controller-manager4.7Dec 7, 2020
• CVE-2020-8564Docker config secrets leaked when file is malformed and loglevel >= 44.7Dec 7, 2020
• CVE-2020-8566Ceph RBD adminSecrets exposed in logs when loglevel >= 44.7Dec 7, 2020
• CVE-2018-1002105In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to est...9.8Dec 5, 2018
• CVE-2015-7528Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name.5.3Apr 11, 2016
• CVE-2016-1905The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.7.7Feb 3, 2016
• CVE-2015-5305Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly hand...6.4Nov 6, 2015