Go/github.com/openkruise/kruise CVE-2026-24005: unknown, EPSS 0.33%
OpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Field in github.com/openkruise/kruise
Action: Upgrade github.com/openkruise/kruise to 1.7.5 or later.
go get github.com/openkruise/kruise@v1.7.5go get github.com/openkruise/kruise@v1.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.5 | - |
| 1.8.0 | 1.8.3 | - |
Fixed versions
| 1.7.5 | 1.8.3 |
Sources
- osv: GO-2026-4549
- https://github.com/openkruise/kruise/security/advisories/GHSA-9fj4-3849-rv9g
- https://github.com/openkruise/kruise/commit/94364b76adf3e8a1749a31afe809a163bed29613
- https://github.com/openkruise/kruise/releases/tag/v1.7.5
- https://github.com/openkruise/kruise/releases/tag/v1.8.3
CVE-2026-24005 · published · modified · JSON