k8s.io/apimachinery vulnerabilities
CVEs whose affected-version data names the k8s.io/apimachinery package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2020-8559Medium· 6.8PoCPrivilege Escalation in Kubernetes
Privilege Escalation in Kubernetes
▾ Twilightapimachinery · k8s.io/apimachineryEPSS 6.1%via OSV
GHSA-74fp-r6jw-h4mpHigh· 7.5Kubernetes apimachinery packages vulnerable to unbounded recursion in JSON or YAML parsing
Kubernetes apimachinery packages vulnerable to unbounded recursion in JSON or YAML parsing
▾ Twilightapimachinery · k8s.io/apimachineryvia OSV
GO-2022-0965NoneUnbounded recursion in JSON parsing in k8s.io/apimachinery
Unbounded recursion in JSON parsing in k8s.io/apimachinery
▾ Sunlitapimachinery · k8s.io/apimachineryvia OSV