Affected by GO-2024-2817 and 2 other vulnerabilities

GO-2024-2817: karmada vulnerable to arbitrary code execution via a crafted command in github.com/karmada-io/karmada

GO-2025-3363: Karmada Tar Slips in CRDs archive extraction in github.com/karmada-io/karmada

GO-2025-3364: Karmada PULL Mode Cluster Privilege Escalation in github.com/karmada-io/karmada

pkg/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/karmada-io/karmada

Links

Open Source Insights

Directories ¶

Path	Synopsis
aggregatedapiserver
apis
apps/v1alpha1 Package v1alpha1 is the v1alpha1 version of the API.	Package v1alpha1 is the v1alpha1 version of the API.
autoscaling/v1alpha1 Package v1alpha1 is the v1alpha1 version of the API.	Package v1alpha1 is the v1alpha1 version of the API.
cluster Package cluster is the internal version of the API.	Package cluster is the internal version of the API.
cluster/install
cluster/mutation
cluster/scheme
cluster/v1alpha1 Package v1alpha1 is the v1alpha1 version of the API.	Package v1alpha1 is the v1alpha1 version of the API.
cluster/validation
config/v1alpha1 Package v1alpha1 is the v1alpha1 version of the API.	Package v1alpha1 is the v1alpha1 version of the API.
networking/v1alpha1 Package v1alpha1 is the v1alpha1 version of the API.	Package v1alpha1 is the v1alpha1 version of the API.
policy/v1alpha1 Package v1alpha1 is the v1alpha1 version of the API.	Package v1alpha1 is the v1alpha1 version of the API.
remedy/v1alpha1 Package v1alpha1 is the v1alpha1 version of the API.	Package v1alpha1 is the v1alpha1 version of the API.
search Package search is the internal version of the API.	Package search is the internal version of the API.
search/install
search/scheme
search/v1alpha1 Package v1alpha1 is the v1alpha1 version of the API.	Package v1alpha1 is the v1alpha1 version of the API.
work/v1alpha1 Package v1alpha1 is the v1alpha1 version of the API.	Package v1alpha1 is the v1alpha1 version of the API.
work/v1alpha2 Package v1alpha2 is the v1alpha2 version of the API.	Package v1alpha2 is the v1alpha2 version of the API.
clusterdiscovery
clusterapi
controllers
applicationfailover
binding
certificate
cluster
context
cronfederatedhpa
deploymentreplicassyncer
execution
federatedhpa
federatedhpa/config
federatedhpa/metrics
federatedhpa/monitor Package monitor contains metrics which are exposed from the HPA controller.	Package monitor contains metrics which are exposed from the HPA controller.
federatedresourcequota
gracefuleviction
hpascaletargetmarker
mcs
multiclusterservice
namespace
remediation
status
unifiedauth
workloadrebalancer
dependenciesdistributor
descheduler
core
detector
estimator
client
pb
server
server/framework
server/framework/plugins
server/framework/plugins/resourcequota
server/framework/runtime
server/metrics
server/nodes
server/replica
service
events
features
generated
clientset/versioned
clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
clientset/versioned/typed/apps/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/apps/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/autoscaling/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/autoscaling/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/cluster/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/cluster/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/config/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/config/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/networking/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/networking/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/policy/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/policy/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/remedy/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/remedy/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/search/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/search/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/work/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/work/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/work/v1alpha2 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/work/v1alpha2/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
informers/externalversions
informers/externalversions/apps
informers/externalversions/apps/v1alpha1
informers/externalversions/autoscaling
informers/externalversions/autoscaling/v1alpha1
informers/externalversions/cluster
informers/externalversions/cluster/v1alpha1
informers/externalversions/config
informers/externalversions/config/v1alpha1
informers/externalversions/internalinterfaces
informers/externalversions/networking
informers/externalversions/networking/v1alpha1
informers/externalversions/policy
informers/externalversions/policy/v1alpha1
informers/externalversions/remedy
informers/externalversions/remedy/v1alpha1
informers/externalversions/search
informers/externalversions/search/v1alpha1
informers/externalversions/work
informers/externalversions/work/v1alpha1
informers/externalversions/work/v1alpha2
listers/apps/v1alpha1
listers/autoscaling/v1alpha1
listers/cluster/v1alpha1
listers/config/v1alpha1
listers/networking/v1alpha1
listers/policy/v1alpha1
listers/remedy/v1alpha1
listers/search/v1alpha1
listers/work/v1alpha1
listers/work/v1alpha2
openapi
karmadactl
addons
addons/descheduler
addons/estimator
addons/init
addons/install
addons/metricsadapter
addons/search
addons/utils
apply
cmdinit
cmdinit/bootstraptoken/agent
cmdinit/bootstraptoken/clusterinfo
cmdinit/cert
cmdinit/karmada
cmdinit/kubernetes
cmdinit/options
cmdinit/utils
cordon
deinit
describe
exec
get
interpret
join
logs
options
promote
register
taint
token
top
unjoin
util
util/apiclient
util/bootstraptoken
util/genericresource Package genericresource is modified from "k8s.io/cli-runtime/pkg/resource".	Package genericresource is modified from "k8s.io/cli-runtime/pkg/resource".
util/testing
metrics
metricsadapter
multiclient
provider
modeling
printers
internalversion
storage
registry
cluster
cluster/storage
search
search/storage
resourceinterpreter
customized/declarative
customized/declarative/configmanager
customized/declarative/luavm
customized/webhook
customized/webhook/configmanager
customized/webhook/request
default/native
default/native/prune
default/thirdparty
default/thirdparty/resourcecustomizations
scheduler
cache
core
core/spreadconstraint
framework
framework/plugins
framework/plugins/apienablement
framework/plugins/clusteraffinity
framework/plugins/clustereviction
framework/plugins/clusterlocality
framework/plugins/spreadconstraint
framework/plugins/tainttoleration
framework/runtime
framework/testing Package testing is a generated GoMock package.	Package testing is a generated GoMock package.
metrics
search
backendstore
proxy
proxy/framework
proxy/framework/plugins
proxy/framework/plugins/cache
proxy/framework/plugins/cluster
proxy/framework/plugins/karmada
proxy/framework/runtime
proxy/store
proxy/testing
servicenameresolutiondetector
coredns
store
sharedcli Package sharedcli is the destination for common commands, flags or utils.	Package sharedcli is the destination for common commands, flags or utils.
klogflag
profileflag
ratelimiterflag
util
eventfilter
fedinformer
fedinformer/genericmanager
fedinformer/keys
fedinformer/typedmanager
fixedpool
gclient
hash
helper
imageparser
interpreter
interpreter/validation
lifted Package lifted contains the files lifted from other projects.	Package lifted contains the files lifted from other projects.
lifted/lua
lifted/pubkeypin
lifted/scheduler/cache
lifted/scheduler/framework
lifted/scheduler/framework/parallelize
lifted/scheduler/util
lifted/selectors
metrics
names
objectwatcher
overridemanager
proxy
restmapper
testing
validation
version
sharedcommand
webhook
clusteroverridepolicy
clusterpropagationpolicy
clusterresourcebinding
configuration
cronfederatedhpa
federatedhpa
federatedresourcequota
interpreter
multiclusteringress
multiclusterservice
overridepolicy
propagationpolicy
resourcebinding
resourcedeletionprotection
resourceinterpretercustomization
work

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL