Go/k8s.io/client-go CVE-2020-8565: unknown, EPSS 0.52%

Unauthorized credential disclosure via debug logs in k8s.io/kubernetes and k8s.io/client-go

Action: Upgrade k8s.io/client-go to 0.20.0-alpha.2 or later.

go get k8s.io/client-go@v0.20.0-alpha.2

Affected

Fixed versions

Sources

• osv: GO-2021-0064
• https://github.com/kubernetes/kubernetes/pull/95316
• https://github.com/kubernetes/kubernetes/commit/e99df0e5a75eb6e86123b56d53e9b7ca0fd00419
• https://github.com/kubernetes/kubernetes/issues/95623

CVE-2020-8565 · published 2021-04-14T20:04:52Z · modified 2026-02-04T02:20:03.995689Z · JSON