https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-25742.htmlhttps://patchthecve.com/cve/CVE-2021-25742.htmlWed, 17 Jun 2026 03:42:23 +0000HIGH 7.6: A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.https://patchthecve.com/cve/CVE-2021-34558.htmlhttps://patchthecve.com/cve/CVE-2021-34558.htmlWed, 17 Jun 2026 03:56:07 +0000MEDIUM 6.5: The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.https://patchthecve.com/cve/CVE-2020-29511.htmlhttps://patchthecve.com/cve/CVE-2020-29511.htmlWed, 17 Jun 2026 03:11:23 +0000CRITICAL 9.8: The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.https://patchthecve.com/cve/CVE-2020-29510.htmlhttps://patchthecve.com/cve/CVE-2020-29510.htmlWed, 17 Jun 2026 03:11:23 +0000CRITICAL 9.8: The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.https://patchthecve.com/cve/CVE-2020-29509.htmlhttps://patchthecve.com/cve/CVE-2020-29509.htmlWed, 17 Jun 2026 03:11:23 +0000CRITICAL 9.8: The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.https://patchthecve.com/cve/CVE-2020-28366.htmlhttps://patchthecve.com/cve/CVE-2020-28366.htmlWed, 17 Jun 2026 03:10:20 +0000HIGH 7.5: Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.https://patchthecve.com/cve/CVE-2020-28362.htmlhttps://patchthecve.com/cve/CVE-2020-28362.htmlWed, 17 Jun 2026 03:10:19 +0000HIGH 7.5: Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.https://patchthecve.com/cve/CVE-2019-11244.htmlhttps://patchthecve.com/cve/CVE-2019-11244.htmlWed, 17 Jun 2026 02:12:36 +0000MEDIUM 5.0: In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permissions (rw-rw-rw-). If --cache-dir is specified and pointed at a different location accessible to other users/groups, the https://patchthecve.com/cve/CVE-2019-11243.htmlhttps://patchthecve.com/cve/CVE-2019-11243.htmlWed, 17 Jun 2026 02:12:36 +0000HIGH 8.1: In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer token, username/password, and client certificate/key data). In the affected versions, rest.AnonymousClientConfig() did not effectively clear servhttps://patchthecve.com/cve/CVE-2018-1002105.htmlhttps://patchthecve.com/cve/CVE-2018-1002105.htmlWed, 17 Jun 2026 01:33:20 +0000CRITICAL 9.8: In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests https://patchthecve.com/cve/CVE-2018-1000133.htmlhttps://patchthecve.com/cve/CVE-2018-1000133.htmlWed, 17 Jun 2026 01:32:29 +0000HIGH 7.5: Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A standard unprivileged user could gain system administrator permissions within the web portal.. This attack appear to be exploitable via The user must be able to lo