Go/k8s.io/kube-state-metrics CVE-2019-10223, CVE-2019-17110: medium 6.5, EPSS 1.78%
Exposure of sensitive information in k8s.io/kube-state-metrics
Action: Upgrade k8s.io/kube-state-metrics to 1.7.2 or later.
go get k8s.io/kube-state-metrics@v1.7.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0 | 1.7.2 | - |
Fixed versions
| 1.7.2 |
Sources
- osv: GO-2022-0621
- nvd: CVE-2019-10223
- https://github.com/kubernetes/kube-state-metrics/commit/03122fe3e2df49a9a7298b8af921d3c37c430f7f
CVE-2019-10223, CVE-2019-17110 · published · modified · JSON