GHSA-mfv7-gq43-w965
Incomplete List of Disallowed Inputs in Kubernetes
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | k8s.io/kubernetes | >= 1.16.0, < 1.18.19 | 1.18.19 |
| Go | k8s.io/kubernetes | >= 1.19.0, < 1.19.11 | 1.19.11 |
| Go | k8s.io/kubernetes | >= 1.20.0, < 1.20.7 | 1.20.7 |
| Go | k8s.io/kubernetes | >= 1.21.0, < 1.21.1 | 1.21.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.
References
External links from the advisory. They lead to third-party sites.