GitHub Advisoryadvisory · Go

GHSA-85rg-8m6h-825p Vulnerabilities with the k8sGPT

HIGH Published 2024-06-13 Modified 2024-06-13 Official page ↗

Ecosystem: Go
Packages: github.com/k8sgpt-ai/k8sgpt
Severity: High
Weaknesses: CWE-22, CWE-457
Reviewed: 2024-06-13

Affected packages

• Go github.com/k8sgpt-ai/k8sgpt: < 0.3.33 → fixed in 0.3.33

Description

Summary Bunch of vulnerabilities found in k8sGPT. Fixed in release https://github.com/k8sgpt-ai/k8sgpt/releases/tag/v0.3.33

Related

Weakness · CWE (2)

CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
CWE-457 Use of Uninitialized Variable weakness

References