| Package | Affected versions | Patched versions |
|---|---|---|
| k8s.io/kubernetes | ≥ 1.16.0, < 1.18.19≥ 1.19.0, < 1.19.11≥ 1.20.0, < 1.20.7≥ 1.21.0, < 1.21.1 | 1.18.191.19.111.20.71.21.1 |
| kubernetes | = 1.21.0≥ 1.16.0, < 1.18.19≥ 1.19.0, < 1.19.10≥ 1.20.0, < 1.20.7 | 1.18.191.19.101.20.7 |
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free