Unbounded recursion in JSON parsing in k8s.io/apimachinery

GHSA-74fp-r6jw-h4mp · GO-2022-0965 · Published 02/09/2022 · updated 07/08/2026

Em resumo

GO-2022-0965 é uma vulnerabilidade ainda sem pontuação que afeta k8s.io/apimachinery.
Correção: atualize para 0.0.0-20190927203648-9ce6eca90e73 ou posterior.

Package	Affected versions	Patched versions
k8s.io/apimachinery Go	`< 0.0.0-20190927203648-9ce6eca90e73`	`0.0.0-20190927203648-9ce6eca90e73`

Unbounded recursion in JSON parsing allows malicious JSON input to cause excessive memory consumption or panics.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.