As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven…

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack

Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal

Nodes can bypass dynamic resource allocation authorization checks

Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from…