Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/k8s.io/kubernetes/cmd/kubelet@1.14.3
purl pkg:golang/k8s.io/kubernetes/cmd/kubelet@1.14.3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-cjth-qqvy-hqhk Kubelet Incorrect Privilege Assignment In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit `runAsUser` attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified `mustRunAsNonRoot: true`, the kubelet will refuse to start the container as root. If the pod did not specify `mustRunAsNonRoot: true`, the kubelet will run the container as uid 0. CVE-2019-11245
GHSA-r76g-g87f-vw8f

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:49:32.886556+00:00 GithubOSV Importer Fixing VCID-cjth-qqvy-hqhk https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-r76g-g87f-vw8f/GHSA-r76g-g87f-vw8f.json 38.0.0