Skip to content
OpenAdvisories

Package · Maven

io.fabric8:kubernetes-client

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.7
    CVE-2021-4178 Public exploit

    fabric8 kubernetes-client vulnerable

    A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.

    io.fabric8:kubernetes-client Maven
  • High 7.4
    CVE-2021-20218

    Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client

    A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat fro…

    io.fabric8:kubernetes-client Maven