AIKIDO-2024-10230
k8s.io/autoscaler/vertical-pod-autoscaler is vulnerable to NULL Pointer Dereference
10
Low Risk
This Affects:
k8s.io/autoscaler/vertical-pod-autoscalerTL;DR
Affected versions of the package are vulnerable to null pointer dereference. A null pointer dereference typically causes the process to fail. Even with exception handling in place, it can be difficult to return the software to a safe operating state.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
k8s.io/autoscaler/vertical-pod-autoscaler is vulnerable to NULL Pointer Dereference in versions 1.2.0 - 1.2.0.
How to fix this
Upgrade the k8s.io/autoscaler/vertical-pod-autoscaler library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.