module = "k8s.io/kubernetes"
package = "k8s.io/kubernetes/pkg/credentialprovider"

description = """
Attempting to read a malformed .dockercfg may cause secrets to be
inappropriately logged.
"""

cve = "CVE-2020-8564"

credit = "@sfowl"

symbols = ["readDockerConfigFileFromBytes", "readDockerConfigJSONFileFromBytes"]

[[versions]]
fixed = "v1.20.0-alpha.1"

[links]
commit = "https://github.com/kubernetes/kubernetes/commit/11793434dac97a49bfed0150b56ac63e5dc34634"
pr = "https://github.com/kubernetes/kubernetes/pull/94712"
context = ["https://github.com/kubernetes/kubernetes/issues/95622"]

# This is a really confusing one to classify becuase of how kubernetes
# does their vendoring stuff.