Skip to content
OpenAdvisories

Package · Go

github.com/k8sgpt-ai/k8sgpt

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High —
    GHSA-rp7v-4384-hfrp

    k8sGPT has Prompt Injection through its k8sGPT-Operator

    ### Summary In the auto-remediation pipeline, `object_to_execution.go` was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object. ### Details This issue was fixed after coor…

    github.com/k8sgpt-ai/k8sgpt Go
  • High —
    GHSA-85rg-8m6h-825p

    Vulnerabilities with the k8sGPT

    ### Summary Bunch of vulnerabilities found in k8sGPT. Fixed in release https://github.com/k8sgpt-ai/k8sgpt/releases/tag/v0.3.33

    github.com/k8sgpt-ai/k8sgpt Go