~ / search / GHSA-8gwj-m6vh-2g6j

GHSA-8gwj-m6vh-2g6j

kOps privilege escalation vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-1943

Packages

EcosystemPackageAffectedFixed in
Go k8s.io/kops < 1.25.4 1.25.4
Go k8s.io/kops >= 1.26.0, < 1.26.2 1.26.2

Details

As written in the advisory (Markdown source, shown as plain text).

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.

References

External links from the advisory. They lead to third-party sites.