CVE-2025-1974
https://github.com/kubernetes/kubernetes/issues/131009
ingress-nginx admission controller RCE escalation
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
March 23, 2025 at 01:38PM
CVE-2025-1098
https://github.com/kubernetes/kubernetes/issues/131008
configuration injection via unsanitized mirror annotations
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
March 23, 2025 at 01:38PM
CVE-2025-1097
https://github.com/kubernetes/kubernetes/issues/131007
configuration injection via unsanitized auth-tls-match-cn annotation
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
March 23, 2025 at 01:38PM
CVE-2025-24514
https://github.com/kubernetes/kubernetes/issues/131006
configuration injection via unsanitized auth-url annotation
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
March 23, 2025 at 01:38PM
CVE-2025-24513
https://github.com/kubernetes/kubernetes/issues/131005
auth secret file path traversal vulnerability
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
March 23, 2025 at 01:38PM
CVE-2025-1767
https://github.com/kubernetes/kubernetes/issues/130786
GitRepo Volume Inadvertent Local Repository Access
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
March 13, 2025 at 12:08PM
CVE-2024-9042
https://github.com/kubernetes/kubernetes/issues/129654
Command Injection affecting Windows nodes via nodes/*/logs/query API
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
January 15, 2025 at 05:28PM
CVE-2024-10220
https://github.com/kubernetes/kubernetes/issues/128885
Arbitrary command execution through gitRepo volume
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
November 20, 2024 at 10:30AM
CVE-2024-9594
https://github.com/kubernetes/kubernetes/issues/128007
VM images built with Image Builder with some providers use default credentials during builds
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
October 11, 2024 at 02:04PM
CVE-2024-9486
https://github.com/kubernetes/kubernetes/issues/128006
VM images built with Image Builder and Proxmox provider use default credentials
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
October 11, 2024 at 02:04PM
CVE-2024-7646
https://github.com/kubernetes/kubernetes/issues/126744
Ingress-nginx Annotation Validation Bypass
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
August 16, 2024 at 12:10PM
CVE-2024-5321
https://github.com/kubernetes/kubernetes/issues/126161
Incorrect permissions on Windows containers logs
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
July 17, 2024 at 09:06AM
CVE-2024-3744
https://github.com/kubernetes/kubernetes/issues/124759
azure-file-csi-driver discloses service account tokens in logs
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
May 08, 2024 at 12:02PM
CVE-2024-3177
https://github.com/kubernetes/kubernetes/issues/124336
Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
April 16, 2024 at 10:04AM
