Unbounded recursion in JSON parsing in k8s.io/apimachinery

GHSA-74fp-r6jw-h4mp · GO-2022-0965 · Published 02/09/2022 · updated 07/08/2026

要点

Package	Affected versions	Patched versions
k8s.io/apimachinery Go	`< 0.0.0-20190927203648-9ce6eca90e73`	`0.0.0-20190927203648-9ce6eca90e73`

Unbounded recursion in JSON parsing allows malicious JSON input to cause excessive memory consumption or panics.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.