Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/k8s.io/kubernetes@1.28.4
purl pkg:golang/k8s.io/kubernetes@1.28.4
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-qxw4-2hry-uuf4 Kubernetes Improper Input Validation vulnerability A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes. CVE-2023-5528
GHSA-hq6q-c2x6-hmch

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:58:50.257724+00:00 GithubOSV Importer Fixing VCID-qxw4-2hry-uuf4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/11/GHSA-hq6q-c2x6-hmch/GHSA-hq6q-c2x6-hmch.json 38.0.0