VDB
Sign up
—

GO-2022-0802

Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

Quick fix

GO-2022-0802 — k8s.io/kubernetes: upgrade to the fixed version with the command below.

go get k8s.io/kubernetes@v1.13.11

Details

Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/k8s.io/kubernetes
Introduced in: 1.13.10Fixed in: 1.13.11
Fixgo get k8s.io/kubernetes@v1.13.11

References