Go/github.com/falcosecurity/plugins/plugins/k8saudit: medium 4.3

k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers

Action: Upgrade github.com/falcosecurity/plugins/plugins/k8saudit to 0.18.0 or later.

go get github.com/falcosecurity/plugins/plugins/k8saudit@v0.18.0

Affected

Fixed versions

Sources

• osv: GHSA-jhjp-4c2q-xmx4
• https://github.com/falcosecurity/plugins/security/advisories/GHSA-jhjp-4c2q-xmx4
• https://github.com/falcosecurity/plugins/pull/1400
• https://github.com/falcosecurity/plugins/commit/0adb9b3c7e2c8bad53f30d01c057e038b2afa5e1
• https://github.com/falcosecurity/plugins
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-aks/v0.6.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-eks/v0.12.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-gke/v0.9.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-ovh/v0.6.0
• https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit/v0.18.0

published 2026-09-21T21:43:52Z · modified 2026-09-28T17:11:25.927704354Z · JSON