Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-1002100
Description
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files.
kubernetes/kubernetes
GitHubProduction-Grade Container Scheduling and Management
GitHubProduction-Grade Container Scheduling and Management>= 1.9.0, <= 1.9.5, >= 1.8.0, <= 1.8.15, >= 1.7.0, <= 1.7.17, >= 1.6.0, <= 1.6.14, >= 1.5.0, <= 1.5.9NVD
openshift/kubernetesGitHubThis is the repo that tracks all patches to the OpenShift distribution of Kubernetes on branches corresponding to OpenShift releases. See https://github.com/openshift/kubernetes/blob/master/README.openshift.md for more
GitHubThis is the repo that tracks all patches to the OpenShift distribution of Kubernetes on branches corresponding to OpenShift releases. See https://github.com/openshift/kubernetes/blob/master/README.openshift.md for more>= 1.9.0, <= 1.9.5, >= 1.8.0, <= 1.8.15, >= 1.7.0, <= 1.7.17, >= 1.6.0, <= 1.6.14, >= 1.5.0, <= 1.5.9NVD
NPM
RubyGems