GHSA-v8j7-hp7c-738f: Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users

Kubetail has a Cross-Site WebSocket Hijacking vulnerability (CSWSH, a security flaw where a malicious website can hijack a WebSocket connection by tricking a user's browser into connecting to an unintended server). An attacker can trick an authenticated Kubetail user into visiting a malicious webpage, which then opens an unauthorized WebSocket connection to read the user's Kubernetes logs (detailed records of what containers are doing) in real time. This affects both local desktop deployments and cluster deployments, and is particularly dangerous because container logs often contain leaked credentials and sensitive data.