Skip to content
OpenAdvisories

Package · Go

k8s.io/apimachinery

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-74fp-r6jw-h4mp

    Kubernetes apimachinery packages vulnerable to unbounded recursion in JSON or YAML parsing

    CVE-2019-11253 is a denial of service vulnerability in the kube-apiserver, allowing authorized users sending malicious YAML or JSON payloads to cause kube-apiserver to consume excessive CPU or memory, potentially crashing and becoming unavailable. When creati…

    k8s.io/apimachinery Go