Go - OSV

GO-2025-4240

Go/k8s.io/kubernetes

Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes 16 Dec 2025

Fix available

GHSA-r6j8-c6r2-37rr

Go/k8s.io/kubernetes

kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass 15 Dec 2025

Fix available
Severity - 5.8 (Medium)

GO-2025-3915

Go/k8s.io/kubernetes

Kubernetes Nodes can delete themselves by adding an OwnerReference in k8s.io/kubernetes 18 Sep 2025

Fix available

GHSA-4x4m-3c2p-qppc

Go/k8s.io/kubernetes

Kubernetes Nodes can delete themselves by adding an OwnerReference 27 Aug 2025

Fix available
Severity - 6.7 (Medium)

GO-2025-3774

Go/k8s.io/kubernetes

Kubernetes allows nodes to bypass dynamic resource allocation authorization checks in k8s.io/kubernetes 28 Jul 2025

Fix available

GHSA-hj2p-8wj8-pfq4

Go/k8s.io/kubernetes

kubernetes allows nodes to bypass dynamic resource allocation authorization checks 23 Jun 2025

Fix available
Severity - 2.7 (Low)

GO-2025-3645

Go/k8s.io/kubernetes

Kubernetes did not effectively clear service account credentials in k8s.io/kubernetes 05 May 2025

Fix available

GO-2025-3521

Go/k8s.io/kubernetes

Kubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes 25 Mar 2025

No fix available

GO-2025-3522

Go/k8s.io/kubernetes

Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes 25 Mar 2025

Fix available

GO-2025-3547

Go/k8s.io/kubernetes

Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes 25 Mar 2025

No fix available

GHSA-3wgm-2gw2-vh5m

Go/k8s.io/kubernetes

Kubernetes GitRepo Volume Inadvertent Local Repository Access 13 Mar 2025

No fix available
Severity - 6.5 (Medium)

GHSA-vv39-3w5q-974q

Go/k8s.io/kubernetes

Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API 13 Mar 2025

Fix available
Severity - 5.9 (Medium)

GO-2025-3465

Go/k8s.io/kubernetes

Node Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes 03 Mar 2025

Fix available

GHSA-jgfp-53c3-624w

Go/k8s.io/kubernetes

Node Denial of Service via kubelet Checkpoint API 13 Feb 2025

Fix available
Severity - 6.2 (Medium)

GO-2024-3286

Go/k8s.io/kubernetes

Kubernetes kubelet arbitrary command execution in k8s.io/kubernetes 27 Nov 2024

Fix available

GHSA-27wf-5967-98gx

Go/k8s.io/kubernetes

Kubernetes kubelet arbitrary command execution 22 Nov 2024

Fix available
Severity - 8.6 (High)

Vulnerabilities