WS-2023-0169

A Git Arg Injection vulnerability was found in kubernetes-sigs/release-sdk. The LSRemoteExec function is concatenating user input with a git command that can be leveraged for arbritary command injection. The issue is fixed in version 0.9.5...

Kubernetes: Git Arg Injection in kubernetes-sigs/release-sdk

A command injection vulnerability was found in the LSRemoteExec function of the kubernetes-sigs/release-sdk Git package. An attacker could exploit this vulnerability by injecting malicious arguments, allowing them to execute arbitrary commands. The impact of this vulnerability could be severe...