Vulnerability Report: GO-2022-0802
- CVE-2019-11251, GHSA-6qfg-8799-r575
- Affects: k8s.io/kubernetes
- Published: Aug 21, 2024
- Modified: Aug 05, 2025
Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes
For detailed information about this vulnerability, visit https://github.com/advisories/GHSA-6qfg-8799-r575.
Affected Modules
-
PathGo Versions
-
from v1.13.10 before v1.13.11, from v1.14.6 before v1.14.7, from v1.15.3 before v1.16.0
Aliases
References
- https://github.com/advisories/GHSA-6qfg-8799-r575
- https://github.com/kubernetes/kubernetes/issues/87773
- https://github.com/kubernetes/kubernetes/pull/82143
- https://groups.google.com/d/msg/kubernetes-announce/YYtEFdFimZ4/nZnOezZuBgAJ
- https://vuln.go.dev/ID/GO-2022-0802.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.