Kubernetes security updates

Security-fix and disclosure events for Kubernetes. Targets recurring searches like “Kubernetes security updates” with timeline evidence — not a marketing changelog.

12 timeline events on record.

Sep 25, 2026
Bump google.golang.org/grpc to v1.84.0 and lift its pin
Dependency remediation
Bump google.golang.org/grpc to v1.84.0 and lift its pin v1.82.2 lacks the CVE-2026-84304 fix (grpc/grpc-go#9331, in v1.83.1+). The four modules v1.83+ adds via cloud.google.com/go/auth are graph-only (only credentials/google imports them, not vendored); record them in status.un…
Open related record
Sep 25, 2026
Bump golang.org/x modules and mdlayher/socket
Dependency remediation
Bump golang.org/x modules and mdlayher/socket golang.org/x/net v0.59.0, crypto v0.57.0, sys v0.48.0, term v0.46.0, text v0.42.0, sync v0.23.0, tools v0.50.0, mod v0.41.0, time v0.16.0, oauth2 v0.37.0, exp 85c1c2202aba, and github.com/mdlayher/socket v0.7.0. x/mod v0.40.0 fixed…
Open related record
Sep 11, 2026
deps: bump google.golang.org/grpc to v1.82.2
Dependency remediation
Merge pull request #141976 from harshitgupta31415/codex/grpc-cve-2026-84445 deps: bump google.golang.org/grpc to v1.82.2
Open related record
Sep 8, 2026
update golang.org/x/crypto to v0.56.0
Dependency remediation
Merge pull request #141886 from AboEl3iz/fix-cve-2026-78662 update golang.org/x/crypto to v0.56.0
Open related record
Jul 20, 2026
Update google.golang.org/grpc to v1.82.1
Dependency remediation
Update google.golang.org/grpc to v1.82.1 This release fixes three security issues in grpc-go. - A gRPC server now stops reading from a connection when a peer sends too many HTTP/2 control frames. Before this change, a peer could flood a server with control frames and make it…
Open related record
Apr 24, 2026
Update golang.org/x/net to v0.53.0
Dependency remediation
Update golang.org/x/net to v0.53.0 Fixes CVE-2026-33814 (golang/go#78476): HTTP/2 Transport hangs indefinitely when a peer sends a SETTINGS frame with MaxFrameSize=0. This is reachable from kube-apiserver's OIDC, admission webhook, and aggregated API client paths.
Open related record
Jan 14, 2026
Update security and stability dependencies
Dependency remediation
Update security and stability dependencies This PR updates several dependencies addressing security vulnerabilities, stability fixes, and authentication improvements. - golang.org/x/crypto: v0.46.0 -> v0.47.0 - Includes latest X509 root certificate bundle updates - Security…
Open related record
Mar 24, 2025
Mask Linux thermal interrupt info in /proc and /sys.
Confirmed security fix
Mask Linux thermal interrupt info in /proc and /sys. On Linux, mask "/proc/interrupts" and "/sys/devices/system/cpu/cpu /thermal_throttle" inside containers by default. Privileged containers or containers started with --security-opt="systempaths=unconfined" are not affected. M…
Open related record
Mar 6, 2024
[CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
Dependency remediation
Merge pull request #123758 from liggitt/protobump [CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
Open related record
May 27, 2021
Transitive dependency: high CVE fix
Dependency remediation
Transitive dependency: high CVE fix heketi that is dependency for glusterfs was updated to import a fork of jwt-go that fixes a high severity CVE-2020-26160 by importing a forked repo (form3tech-oss/jwt-go) that fixes the CVE as the original repo (dgrijalva/jwt-go) has a fix wi…
Open related record
Jun 17, 2020
[security] Vulnerability in golang.org/x/text/encoding/unicode v0.3.2
Confirmed security fix
[security] Vulnerability in golang.org/x/text/encoding/unicode v0.3.2 Hello gophers, Version v0.3.3 of golang.org/x/text fixes a vulnerability in the golang.org/x/text/encoding/unicode package which could lead to the UTF-16 decoder entering an infinite loop, causing the progra…
Open related record
Jun 2, 2018
Automatic merge from submit-queue (batch tested with PRs 64641, 64532). If you want to cherry-pick this change to another branch, please follow the instructions here .
Security hardening
Merge pull request #64532 from tallclair/gitrepo Automatic merge from submit-queue (batch tested with PRs 64641, 64532). If you want to cherry-pick this change to another branch, please follow the instructions here . Validate that GitRepoVolumeSource parameters are not flags t…
Open related record