tocsin

Go/github.com/metal3-io/cluster-api-provider-metal3: medium 5.5

CAPM3 vulnerable to Cross-Namespace resource access

Action: Upgrade github.com/metal3-io/cluster-api-provider-metal3 to 1.11.8 or later.

go get github.com/metal3-io/cluster-api-provider-metal3@v1.11.8
go get github.com/metal3-io/cluster-api-provider-metal3@v1.12.5

Affected

introducedfixedlast affected
01.11.8-
1.12.01.12.5-

Fixed versions

1.11.81.12.5

Sources

published · modified · JSON