GHSA-35c7-w35f-xwgh
GitHub Security Advisory
Kube-proxy may unintentionally forward traffic
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (`spec.ports[*].port`) as a LoadBalancer Service when the LoadBalancer controller does not set the `status.loadBalancer.ingress[].ip` field. Clusters
where the LoadBalancer controller sets the `status.loadBalancer.ingress[].ip` field are unaffected.
Affected Packages
Go
k8s.io/kubernetes
Affected versions:
0
(fixed in 1.21)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 16, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.