Lack of data validation In k8s.io/kubernetes
Description
kube-apiserver vulnerable to policy bypass Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 go | 1.27.3, 1.26.6, 1.25.11, 1.24.15 | ||
 debian 11 | 1.20.5+really1.20.2-1 | ||
debian 12 | 1.20.5+really1.20.2-1 | ||
debian 13 | 1.20.5+really1.20.2-1 | ||
debian 14 | 1.20.5+really1.20.2-1 |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2. 3. 4. 5. 6. 7. 8. 9.