kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/RichardoC/kube-audit-rest(Go) | 0 | 0.0.0-20250205113217-9df8886b4819 | N/A |
CVSS Metrics