Skip to content
OpenAdvisories

Package · Wolfi

spark-operator

83 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

83 results · Feed

  • Medium 4.7
    CVE-2020-8564

    Docker config secrets leaked when file is malformed and loglevel >= 4

    In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v…

    Kubernetes Kubernetes spark-operator k8s.io/kubernetes Debian Wolfi Go
  • Medium 4.7
    CVE-2020-8565

    Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9

    In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1.17.13, < v1.20.0-al…

    Kubernetes Kubernetes spark-operator newrelic-nri-statsd Debian Azure Linux Wolfi Go
  • Medium 6.4
    CVE-2020-8559 Public exploit

    Privilege escalation from compromised node to cluster

    The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a ful…

    Kubernetes Kubernetes zot kots Debian Alpine Wolfi Go