Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/k8s.io/kubernetes@1.28.12
purl pkg:golang/k8s.io/kubernetes@1.28.12
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-ftrr-y54a-s7a1 Kubernetes kubelet arbitrary command execution The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2. CVE-2024-10220
GHSA-27wf-5967-98gx
VCID-zexe-7ywv-cbcf Kubernetes sets incorrect permissions on Windows containers logs A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs. CVE-2024-5321
GHSA-82m2-cv7p-4m75

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:51:17.197839+00:00 GithubOSV Importer Fixing VCID-zexe-7ywv-cbcf https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/07/GHSA-82m2-cv7p-4m75/GHSA-82m2-cv7p-4m75.json 38.0.0
2026-04-01T12:51:11.591296+00:00 GithubOSV Importer Fixing VCID-ftrr-y54a-s7a1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/11/GHSA-27wf-5967-98gx/GHSA-27wf-5967-98gx.json 38.0.0