HIGH8.1Go
GHSA-27wf-5967-98gx· CVE-2024-10220, GO-2024-3286Kubernetes kubelet arbitrary command execution
Modified: 9/10/2026
package
Go/k8s.io/kubernetes
pkg:go/k8s.io/kubernetes
LOW3.1Go
GHSA-2h9c-34v6-3qmr· CVE-2015-7561, GO-2023-1985Kubernetes in OpenShift3 Access Control Misconfiguration
Modified: 9/10/2026
MEDIUM5.5Go
GHSA-2jq6-ffph-p4h8· CVE-2018-1002100, GO-2023-1959Kubernetes arbitrary file overwrite
Modified: 2/3/2026
CRITICAL9.8Go
GHSA-2jx2-76rc-2v7v· CVE-2017-1000056, GO-2023-1492Kubernetes Privilege Escalation
Modified: 8/20/2024
MEDIUM6.8Go
GHSA-33c5-9fx5-fvjm· CVE-2020-8559, GO-2024-2748Privilege Escalation in Kubernetes
Modified: 9/10/2026
MEDIUM5.5Go
GHSA-34jx-wx69-9x8v· CVE-2019-1002101, GO-2022-0782Symlink Attack in kubectl cp
Modified: 9/10/2026
MEDIUM5.8Go
GHSA-35c7-w35f-xwgh· CVE-2021-25736, GO-2023-2159Kube-proxy may unintentionally forward traffic
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-3wgm-2gw2-vh5m· CVE-2025-1767, GO-2025-3521Kubernetes GitRepo Volume Inadvertent Local Repository Access
Modified: 9/10/2026
MEDIUM6.7Go
GHSA-4x4m-3c2p-qppc· CVE-2025-5187, GO-2025-3915Kubernetes Nodes can delete themselves by adding an OwnerReference
Modified: 9/10/2026
MEDIUM5.7Go
GHSA-6qfg-8799-r575· CVE-2019-11251, GO-2022-0802Kubernetes kubectl cp Vulnerable to Symlink Attack
Modified: 8/21/2024
MEDIUM4.1Go
GHSA-74j8-88mm-7496· CVE-2020-8561Confused Deputy in Kubernetes
Modified: 9/10/2026
HIGH8.8Go
GHSA-7fxm-f474-hf8w· CVE-2023-3676, GO-2023-2330Kubernetes privilege escalation vulnerability
Modified: 9/10/2026
MEDIUM6.1Go
GHSA-82m2-cv7p-4m75· CVE-2024-5321, GO-2024-2994Kubernetes sets incorrect permissions on Windows containers logs
Modified: 9/10/2026
MEDIUM4.7Go
GHSA-8cfg-vx93-jvxw· CVE-2020-8565, GO-2021-0064Kubernetes client-go vulnerable to Sensitive Information Leak via Log File
Modified: 9/10/2026
MEDIUM4.7Go
GHSA-8mjg-8c8g-6h85· CVE-2020-8564, GO-2021-0066Kubernetes Sensitive Information leak via Log File
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-cgcv-5272-97pr· CVE-2023-2728, GO-2023-1892Kubernetes mountable secrets policy bypass
Modified: 9/10/2026
HIGH8.1Go
GHSA-f5f7-6478-qm6p· CVE-2021-25741, GO-2022-0910Files or Directories Accessible to External Parties in kubernetes
Modified: 9/10/2026
LOW3.0Go
GHSA-f9jg-8p32-2f55· CVE-2021-25743, GO-2022-0983kubectl ANSI escape characters not filtered
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-g42g-737j-qx6j· CVE-2021-25735, GO-2022-0907Access Restriction Bypass in kube-apiserver
Modified: 9/10/2026
HIGH8.1Go
GHSA-gc2p-g4fg-29vh· CVE-2019-11243, GO-2025-3645Kubernetes did not effectively clear service account credentials
Modified: 5/5/2025
HIGH7.7Go
GHSA-h7wq-jj8r-qm7p· CVE-2024-0793, GO-2024-3277Kubernetes Nil pointer dereference in KCM after v1 HPA patch request
Modified: 9/10/2026
LOW2.7Go
GHSA-hj2p-8wj8-pfq4· CVE-2025-4563, GO-2025-3774kubernetes allows nodes to bypass dynamic resource allocation authorization checks
Modified: 9/10/2026
HIGH8.8Go
GHSA-hq6q-c2x6-hmch· CVE-2023-5528, GO-2023-2341Kubernetes Improper Input Validation vulnerability
Modified: 9/10/2026
MEDIUM5.0Go
GHSA-j9wf-vvm6-4r9w· CVE-2020-8554Unverified Ownership in Kubernetes
Modified: 9/10/2026
MEDIUM6.2Go
GHSA-jgfp-53c3-624w· CVE-2025-0426, GO-2025-3465Node Denial of Service via kubelet Checkpoint API
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-jmrx-5g74-6v2f· CVE-2019-11250, GO-2021-0065Kubernetes client-go library logs may disclose credentials to unauthorized users
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-jp32-vmm6-3vf5· CVE-2015-5305, GO-2022-0701Directory Traversal in Kubernetes
Modified: 11/8/2023
MEDIUM4.8Go
GHSA-mfv7-gq43-w965· CVE-2021-25737, GO-2022-0908Incomplete List of Disallowed Inputs in Kubernetes
Modified: 8/21/2024
MEDIUM5.6Go
GHSA-mm7g-f2gg-cw8g· CVE-2017-1002102, GO-2023-1977Kubernetes arbitrary file overwrite
Modified: 8/20/2024
HIGH7.5Go
GHSA-pmqp-h87c-mr78· CVE-2019-11253, GO-2022-0703XML Entity Expansion and Improper Input Validation in Kubernetes API server
Modified: 9/10/2026
LOW2.7Go
GHSA-pxhw-596r-rwq5· CVE-2024-3177, GO-2024-2746Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-q4rr-64r9-fwgf· CVE-2019-1002100, GO-2023-1946Kubernetes DoS Vulnerability
Modified: 9/10/2026
HIGH8.8Go
GHSA-q78c-gwqw-jcmc· CVE-2023-3955, GO-2023-2170Kubernetes privilege escalation vulnerability
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-qc2g-gmh6-95p4· CVE-2023-2727, GO-2023-1891kube-apiserver vulnerable to policy bypass
Modified: 9/10/2026
LOW3.1Go
GHSA-qh36-44jv-c8xj· CVE-2020-8562Potential proxy IP restriction bypass in Kubernetes
Modified: 9/10/2026
MEDIUM4.3Go
GHSA-qhm4-jxv7-j9pq· CVE-2020-8551, GO-2022-0867Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes
Modified: 8/7/2026
MEDIUM5.8Go
GHSA-r6j8-c6r2-37rr· CVE-2025-13281, GO-2025-4240kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass
Modified: 9/10/2026
MEDIUM5.9Go
GHSA-vv39-3w5q-974q· CVE-2024-9042, GO-2025-3522Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API
Modified: 9/10/2026
LOW3.1Go
GHSA-vw47-mr44-3jf9· CVE-2021-25740Confused Deputy in Kubernetes
Modified: 9/10/2026
HIGH8.8Go
GHSA-wqv3-8cm6-h6wg· CVE-2020-8558, GO-2022-0885Improper Authentication in Kubernetes
Modified: 9/10/2026
MEDIUM5.9Go
GHSA-wqwf-x5cj-rg56· CVE-2018-1002101, GO-2022-0886Kubernetes Arbitrary Command Injection
Modified: 9/10/2026
MEDIUM6.3Go
GHSA-x6mj-w4jf-jmgw· CVE-2020-8555, GO-2022-0890Server Side Request Forgery (SSRF) in Kubernetes
Modified: 9/10/2026
MEDIUM4.4Go
GHSA-xc8m-28vv-4pjc· CVE-2023-2431, GO-2023-1864Kubelet vulnerable to bypass of seccomp profile enforcement
Modified: 9/10/2026
—Go
GO-2021-0066· CVE-2020-8564, GHSA-8mjg-8c8g-6h85Sensitive information leak via log file in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2022-0701· CVE-2015-5305, GHSA-jp32-vmm6-3vf5Directory traversal in k8s.io/kubernetes
Modified: 7/19/2024
—Go
GO-2022-0703· CVE-2019-11253, GHSA-pmqp-h87c-mr78XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2022-0782· CVE-2019-1002101, GHSA-34jx-wx69-9x8vSymlink Attack in kubectl cp in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2022-0802· CVE-2019-11251, GHSA-6qfg-8799-r575Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2022-0867· CVE-2020-8551, GHSA-qhm4-jxv7-j9pqAllocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes
Modified: 8/7/2026
—Go
GO-2022-0885· CVE-2020-8558, GHSA-wqv3-8cm6-h6wgImproper Authentication in Kubernetes in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2022-0886· CVE-2018-1002101, GHSA-wqwf-x5cj-rg56Kubernetes Arbitrary Command Injection in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2022-0890· CVE-2020-8555, GHSA-x6mj-w4jf-jmgwServer Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2022-0907· CVE-2021-25735, GHSA-g42g-737j-qx6jAccess Restriction Bypass in kube-apiserver in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2022-0908· CVE-2021-25737, GHSA-mfv7-gq43-w965Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2022-0910· CVE-2021-25741, GHSA-f5f7-6478-qm6pFiles or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2022-0983· CVE-2021-25743, GHSA-f9jg-8p32-2f55ANSI escape characters not filtered in kubectl in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2023-1492· CVE-2017-1000056, GHSA-2jx2-76rc-2v7vKubernetes Privilege Escalation in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2023-1628· CVE-2022-3162, GHSA-2394-5535-8j88Kubernetes vulnerable to path traversal in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2023-1629· CVE-2022-3294, GHSA-jh36-q97c-9928Kubernetes vulnerable to validation bypass in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2023-1864· CVE-2023-2431, GHSA-xc8m-28vv-4pjcKubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2023-1891· CVE-2023-2727, GHSA-qc2g-gmh6-95p4Vulnerable to policy bypass in kube-apiserver in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2023-1892· CVE-2023-2728, GHSA-cgcv-5272-97prKubernetes mountable secrets policy bypass in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2023-1946· CVE-2019-1002100, GHSA-q4rr-64r9-fwgfKubernetes DoS Vulnerability in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2023-1959· CVE-2018-1002100, GHSA-2jq6-ffph-p4h8Kubernetes arbitrary file overwrite in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2023-1977· CVE-2017-1002102, GHSA-mm7g-f2gg-cw8gKubernetes can trigger deletion of arbitrary files from the nodes where containers are running in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2023-1985· CVE-2015-7561, GHSA-2h9c-34v6-3qmrKubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2023-2159· CVE-2021-25736, GHSA-35c7-w35f-xwghKube-proxy may unintentionally forward traffic in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2023-2170· CVE-2023-3955, GHSA-q78c-gwqw-jcmcInsufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils
Modified: 2/4/2026
—Go
GO-2023-2330· CVE-2023-3676, GHSA-7fxm-f474-hf8wInsufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2023-2341· CVE-2023-5528, GHSA-hq6q-c2x6-hmchKubernetes Improper Input Validation vulnerability in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2024-2746· CVE-2024-3177, GHSA-pxhw-596r-rwq5Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2024-2748· CVE-2020-8559, GHSA-33c5-9fx5-fvjmPrivilege Escalation in Kubernetes in k8s.io/apimachinery
Modified: 2/4/2026
—Go
GO-2024-2753· CVE-2020-8557, GHSA-55qj-gj3x-jq9rDenial of service in Kubernetes in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2024-2754· CVE-2020-8566, GHSA-5x96-j797-5qqwSensitive Information leak for users of Ceph RBD via Log File in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2024-2755· CVE-2020-8563, GHSA-5xfg-wv98-264mSensitive Information leak for VSphere users via Log File in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2024-2780· CVE-2019-11245, GHSA-r76g-g87f-vw8fKubelet Incorrect Privilege Assignment in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2024-2994· CVE-2024-5321, GHSA-82m2-cv7p-4m75Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2024-3277· CVE-2024-0793, GHSA-h7wq-jj8r-qm7pKubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2024-3286· CVE-2024-10220, GHSA-27wf-5967-98gxKubernetes kubelet arbitrary command execution in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2025-3465· CVE-2025-0426, GHSA-jgfp-53c3-624wNode Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2025-3521· CVE-2025-1767, GHSA-3wgm-2gw2-vh5mKubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2025-3522· CVE-2024-9042, GHSA-vv39-3w5q-974qKubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2025-3547· CVE-2024-7598, GHSA-r56h-j38w-hrqqKubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes
Modified: 8/7/2026
—Go
GO-2025-3645· CVE-2019-11243, GHSA-gc2p-g4fg-29vhKubernetes did not effectively clear service account credentials in k8s.io/kubernetes
Modified: 3/3/2026
—Go
GO-2025-3774· CVE-2025-4563, GHSA-hj2p-8wj8-pfq4Kubernetes allows nodes to bypass dynamic resource allocation authorization checks in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2025-3915· CVE-2025-5187, GHSA-4x4m-3c2p-qppcKubernetes Nodes can delete themselves by adding an OwnerReference in k8s.io/kubernetes
Modified: 2/4/2026
—Go
GO-2025-4240· CVE-2025-13281, GHSA-r6j8-c6r2-37rrHalf-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes
Modified: 2/4/2026