Go/github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp CVE-2020-8567: unknown, EPSS 1.49%

Kubernetes Secrets Store CSI Driver plugins arbitrary file write in github.com/Azure/secrets-store-csi-driver-provider-azure

Action: Upgrade github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp to 0.2.0 or later.

go get github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp@v0.2.0

Affected

Fixed versions

Sources

• osv: GO-2024-2750#Go/github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp
• https://github.com/advisories/GHSA-2v35-wj4r-rcmv
• https://nvd.nist.gov/vuln/detail/CVE-2020-8567
• https://github.com/Azure/secrets-store-csi-driver-provider-azure/pull/298
• https://github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp/pull/74
• https://github.com/hashicorp/secrets-store-csi-driver-provider-vault/pull/50
• https://github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384
• https://groups.google.com/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHY

CVE-2020-8567 · published 2024-06-05T15:10:52Z · modified 2026-06-19T18:29:26.781617650Z · JSON