Skip to content
OpenAdvisories

Package · GitHub Actions

Azure/setup-kubectl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.9
    CVE-2023-23939

    Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower

    Azure/setup-kubectl is a GitHub Action for installing Kubectl. This vulnerability only impacts versions before version 3. An insecure temporary creation of a file allows other actors on the Actions runner to replace the Kubectl binary created by this action b…

    Azure setup-kubectl Azure/setup-kubectl GitHub Actions