Skip to main content
cve.nowby Sazabi
← Go
GoPackage

k8s.io/client-go

3 known vulnerabilities (2 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 medium, 1 low
Registry
pkg.go.dev

Advisories 3

  • CVE-2020-8565Medium 4.7

    Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9

    Affected: fixed in 0.20.0-alpha.2; from 0.19.0, fixed in 0.19.6; from 0.20.0-alpha.0, fixed in 0.20.0-alpha.2; from 0.18.0, fixed in 0.18.14; fixed in 0.17.16.

  • CVE-2019-11250Medium 4.7

    Kubernetes client-go logs authorization headers at debug verbosity levels

    Affected: fixed in 0.17.0.

  • kubectl creates world-writeable cached schema files

    Affected: from 1.8.0, fixed in 1.12.9.