—
GO-2022-0965
Unbounded recursion in JSON parsing in k8s.io/apimachinery
Quick fix
GO-2022-0965 — k8s.io/apimachinery: upgrade to the fixed version with the command below.
go get k8s.io/apimachinery@v0.0.0-20190927203648-9ce6eca90e73Details
Unbounded recursion in JSON parsing allows malicious JSON input to cause excessive memory consumption or panics.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / k8s.io/apimachinery
Introduced in:
0 Fixed in: 0.0.0-20190927203648-9ce6eca90e73 Fix
go get k8s.io/apimachinery@v0.0.0-20190927203648-9ce6eca90e73