Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/k8s.io/kubernetes@1.28.0
purl pkg:golang/k8s.io/kubernetes@1.28.0
Next non-vulnerable version 1.28.1
Latest non-vulnerable version 1.34.2
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-3rmn-ytr3-6yet
Aliases:
CVE-2023-3676
GHSA-7fxm-f474-hf8w
Kubernetes privilege escalation vulnerability A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.
1.28.1
Affected by 0 other vulnerabilities.
VCID-7ddh-ksnz-nbhj
Aliases:
CVE-2023-3955
GHSA-q78c-gwqw-jcmc
Kubernetes privilege escalation vulnerability A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.
1.28.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:57:27.250656+00:00 GithubOSV Importer Affected by VCID-3rmn-ytr3-6yet https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/10/GHSA-7fxm-f474-hf8w/GHSA-7fxm-f474-hf8w.json 38.0.0
2026-04-01T12:57:23.353021+00:00 GithubOSV Importer Affected by VCID-7ddh-ksnz-nbhj https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/10/GHSA-q78c-gwqw-jcmc/GHSA-q78c-gwqw-jcmc.json 38.0.0