ECHO-fd52-1a86-4159

See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-fd52-1a86-4159
Upstream
Withdrawn
2026-09-08T10:27:57Z
Published
2026-06-22T13:45:03Z
Modified
2026-09-08T10:45:13Z
Summary
Race in Kubernetes namespace termination (k/k#126587), scoped upstream to "kube-apiserver >= v1.3" — control-plane behaviour, not library code a client can reach. We ship only the image-updater client; k8s.io/kubernetes is transitive, and the binary carries no pkg/registry, pkg/controller or pkg/kubeapiserver symbols on either arch (`go tool nm`). Fixed cluster-side by KEP-5080 (stable 1.34); GO-2025-3547 lists no fix, so no bump clears it.
Details
References

Affected packages

Echo
argocd-image-updater

Package

Name
argocd-image-updater
Purl
pkg:deb/echo/argocd-image-updater

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.3.0+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.28

Package

Name
kubernetes-1.28
Purl
pkg:deb/echo/kubernetes-1.28

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.28.15+e8

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.29

Package

Name
kubernetes-1.29
Purl
pkg:deb/echo/kubernetes-1.29

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.29.15+e26

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.29-fips

Package

Name
kubernetes-1.29-fips
Purl
pkg:deb/echo/kubernetes-1.29-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.29.15+e18

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.30

Package

Name
kubernetes-1.30
Purl
pkg:deb/echo/kubernetes-1.30

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.30.14+e18

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.30-fips

Package

Name
kubernetes-1.30-fips
Purl
pkg:deb/echo/kubernetes-1.30-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.30.14+e21

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.31

Package

Name
kubernetes-1.31
Purl
pkg:deb/echo/kubernetes-1.31

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.31.14+e24

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.31-fips

Package

Name
kubernetes-1.31-fips
Purl
pkg:deb/echo/kubernetes-1.31-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.31.14+e24

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.32

Package

Name
kubernetes-1.32
Purl
pkg:deb/echo/kubernetes-1.32

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.32.13+e20

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.32-fips

Package

Name
kubernetes-1.32-fips
Purl
pkg:deb/echo/kubernetes-1.32-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.32.13+e21

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.33

Package

Name
kubernetes-1.33
Purl
pkg:deb/echo/kubernetes-1.33

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.33.13+e11

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.33-fips

Package

Name
kubernetes-1.33-fips
Purl
pkg:deb/echo/kubernetes-1.33-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.33.13+e10

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.34

Package

Name
kubernetes-1.34
Purl
pkg:deb/echo/kubernetes-1.34

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34.11+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.34-fips

Package

Name
kubernetes-1.34-fips
Purl
pkg:deb/echo/kubernetes-1.34-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34.11+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.35

Package

Name
kubernetes-1.35
Purl
pkg:deb/echo/kubernetes-1.35

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.35.8+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.35-fips

Package

Name
kubernetes-1.35-fips
Purl
pkg:deb/echo/kubernetes-1.35-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.35.8+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.36

Package

Name
kubernetes-1.36
Purl
pkg:deb/echo/kubernetes-1.36

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.36.4+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.36-fips

Package

Name
kubernetes-1.36-fips
Purl
pkg:deb/echo/kubernetes-1.36-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.36.4+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.37

Package

Name
kubernetes-1.37
Purl
pkg:deb/echo/kubernetes-1.37

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.37.0+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
kubernetes-1.37-fips

Package

Name
kubernetes-1.37-fips
Purl
pkg:deb/echo/kubernetes-1.37-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.37.0+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
rancher-kuberlr-kubectl-3

Package

Name
rancher-kuberlr-kubectl-3
Purl
pkg:deb/echo/rancher-kuberlr-kubectl-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.3+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
rancher-kuberlr-kubectl-4

Package

Name
rancher-kuberlr-kubectl-4
Purl
pkg:deb/echo/rancher-kuberlr-kubectl-4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.1.1+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
rancher-kuberlr-kubectl-5

Package

Name
rancher-kuberlr-kubectl-5
Purl
pkg:deb/echo/rancher-kuberlr-kubectl-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.1.1+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
rancher-kuberlr-kubectl-6

Package

Name
rancher-kuberlr-kubectl-6
Purl
pkg:deb/echo/rancher-kuberlr-kubectl-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.1.1+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
rancher-kuberlr-kubectl-7

Package

Name
rancher-kuberlr-kubectl-7
Purl
pkg:deb/echo/rancher-kuberlr-kubectl-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.1.1+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"
rancher-kuberlr-kubectl-8

Package

Name
rancher-kuberlr-kubectl-8
Purl
pkg:deb/echo/rancher-kuberlr-kubectl-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.1.1+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-fd52-1a86-4159.json"