Affected by GO-2024-3325
and 3 other vulnerabilities
GO-2024-3325: kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp
GO-2025-3538: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp
GO-2025-3985: kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp
GO-2026-5088: kcp's cache server is accessible without authentication or authorization checks in github.com/kcp-dev/kcp
GoContext turns the PostStartHookContext into a context.Context for use in routines that may or may not
run inside of a post-start-hook. The k8s APIServer wrote the post-start-hook context code before contexts
were part of the Go stdlib.
Affected by 
Documentation
¶
Source Files