VDB
GHSA-mm7g-f2gg-cw8g
GHSA-mm7g-f2gg-cw8g
PUBLISHED
CVSS 5.599999904632568 MEDIUM
Kubernetes arbitrary file overwrite
Record from GitHub Advisory Database · Published May 13, 2022
k8s.io/kubernetes is fixed in 1.9.4, 1.8.9 and 1.7.14 (Go Modules)
Kubernetes arbitrary file overwrite
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| k8s.io/kubernetes | Go Modules | 1.9.4, 1.8.9, 1.7.14 |
Risk scores
CVSS 3.0
5.599999904632568
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| k8s.io | kubernetes | 1.8.0, 1.9.0, 1.3.0 |
Timeline
- May 13, 2022 CVE Published
- Apr 9, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-mm7g-f2gg-cw8g
vulnetix vdb fixes GHSA-mm7g-f2gg-cw8gOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-mm7g-f2gg-cw8g/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart