GO-2022-0617
and 17 other vulnerabilities
GO-2022-0617 : WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes
GO-2022-0907 : Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes
GO-2022-0908 : Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes
GO-2022-0910 : Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes
GO-2022-0983 : kubectl ANSI escape characters not filtered in k8s.io/kubernetes
GO-2023-1864 : Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes
GO-2023-1891 : kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes
GO-2023-1892 : Kubernetes mountable secrets policy bypass in k8s.io/kubernetes
GO-2023-2159 : Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes
GO-2023-2341 : Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes
GO-2024-2754 : Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes
GO-2024-2755 : Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes
GO-2024-2994 : Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
GO-2024-3277 : Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes
GO-2025-3465 : Node Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes
GO-2025-3521 : Kubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes
GO-2025-3522 : Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes
GO-2025-3547 : Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes
Discover Packages
k8s.io/kubernetes
test
fuzz
yaml
package
Version:
v1.18.7
Opens a new window with list of versions in this module.
Published: Aug 12, 2020
License: Apache-2.0
Opens a new window with license information.
Imports: 5
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
Package yaml implements fuzzers for yaml deserialization routines in
Kubernetes. These targets are compatible with the github.com/dvyukov/go-fuzz
fuzzing framework.
func FuzzDurationStrict(b []byte ) int
FuzzDurationStrict is a fuzz target for strict-unmarshaling Duration defined
in "k8s.io/apimachinery/pkg/apis/meta/v1". This target also checks that the
unmarshaled result can be marshaled back to the input.
func FuzzMicroTimeStrict(b []byte ) int
FuzzMicroTimeStrict is a fuzz target for strict-unmarshaling MicroTime
defined in "k8s.io/apimachinery/pkg/apis/meta/v1". This target also checks
that the unmarshaled result can be marshaled back to the input.
FuzzSigYaml is a fuzz target for "sigs.k8s.io/yaml" unmarshaling.
FuzzTimeStrict is a fuzz target for strict-unmarshaling Time defined in
"k8s.io/apimachinery/pkg/apis/meta/v1". This target also checks that the
unmarshaled result can be marshaled back to the input.
FuzzYamlV2 is a fuzz target for "gopkg.in/yaml.v2" unmarshaling.
¶
Click to show internal directories.
Click to hide internal directories.
Affected by 
Documentation
¶
Source Files