Lucene search

K
osvGoogleOSV:GHSA-F9JG-8P32-2F55
HistoryJan 08, 2022 - 12:00 a.m.

kubectl ANSI escape characters not filtered

2022-01-0800:00:21
Google
osv.dev
5

3.9 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%

kubectl (k8s.io/kubernetes/pkg/kubectl) does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.

CPENameOperatorVersion
k8s.io/kuberneteslt1.26.0-alpha.3

3.9 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%