You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
See doc/triage.md for instructions on how to triage this report.
modules:
- module: github.com/coredns/coredns
versions:
- {}
packages:
- package: github.com/coredns/coredns
description: A flaw was found in coreDNS. This flaw allows a malicious user to redirect
traffic intended for external top-level domains (TLD) to a pod they control by
creating projects and namespaces that match the TLD.
cves:
- CVE-2022-2837
ghsas:
- GHSA-h828-v5pv-33qx
references:
- web: https://nvd.nist.gov/vuln/detail/CVE-2022-2837
- web: https://bugzilla.redhat.com/show_bug.cgi?id=2118543
- advisory: https://github.com/advisories/GHSA-h828-v5pv-33qx
The text was updated successfully, but these errors were encountered:
In GitHub Security Advisory GHSA-h828-v5pv-33qx, there is a vulnerability in the following Go packages or modules:
Cross references:
See doc/triage.md for instructions on how to triage this report.
The text was updated successfully, but these errors were encountered: