Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/k8s.io/kubernetes@1.29.13
purl pkg:golang/k8s.io/kubernetes@1.29.13
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-sur2-ewj3-8bgx Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API A security vulnerability has been discovered in Kubernetes windows nodes that could allow a user with the ability to query a node's '/logs' endpoint to execute arbitrary commands on the host. This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below. CVE-2024-9042
GHSA-vv39-3w5q-974q

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:56:19.391609+00:00 GithubOSV Importer Fixing VCID-sur2-ewj3-8bgx https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/03/GHSA-vv39-3w5q-974q/GHSA-vv39-3w5q-974q.json 38.0.0