Go/github.com/k8sgpt-ai/k8sgpt: high
k8sGPT has Prompt Injection through its k8sGPT-Operator
Action: Upgrade github.com/k8sgpt-ai/k8sgpt to 0.4.32 or later.
go get github.com/k8sgpt-ai/k8sgpt@v0.4.32Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.32 | - |
Fixed versions
| 0.4.32 |
Sources
- osv: GHSA-rp7v-4384-hfrp
- https://github.com/k8sgpt-ai/k8sgpt/security/advisories/GHSA-rp7v-4384-hfrp
- https://github.com/k8sgpt-ai/k8sgpt
published · modified · JSON