k8s.io/client-go
Go3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting k8s.io/client-gopage 1 of 1
- CVE-2019-11244MEDIUMCVSS 5.0EG 5.0✓ Fixed in 1.12.92019-04-22
In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permissions (rw-rw-rw-). If --cache-dir is specified and pointed a…
- CVE-2019-11250MEDIUMCVSS 6.5EG 6.5✓ Fixed in 0.17.02019-08-29
The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components (such as kube-apiserver) prior to v1.16.0, whic…
- CVE-2020-8565MEDIUMCVSS 4.7EG 4.7✓ Fixed in 0.20.0-alpha.22020-12-07
In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1…
Check whether k8s.io/client-go is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for k8s.io/client-go CVEs against the assets you own.
Start Free Scan →