Go modules package
k8s.io/kube-state-metrics
pkg:golang/k8s.io/kube-state-metrics
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-10223 | Med | 6.5 | >= 1.7.0, < 1.7.2 | 1.7.2 | Nov 5, 2019 | A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled annotations to be exposed as metrics. By default, the kube-state-metrics metrics only expose metadata about Secrets. However, |
- affected >= 1.7.0, < 1.7.2fixed 1.7.2
A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled annotations to be exposed as metrics. By default, the kube-state-metrics metrics only expose metadata about Secrets. However,