Approved changes feed: RSS · Atom

cpe:2.3:a:kubernetes:kubernetes_java_client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKubernetes (3ee05930-9e42-51b2-ad52-30832f573b15)
ProductKubernetes Java Client (1cd05043-ca62-533b-b939-88f0540d40d0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-25738 vulnerable 2026-06-03 14:44:05.808530 Code exec via yaml parsing
MEDIUM (6.7)
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
Published: 2021-10-11T18:55:10.100Z
Updated: 2024-09-16T19:52:29.851Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8570 vulnerable 2026-06-03 14:43:09.664899 Kubernetes Java client libraries unvalidated path traversal in Copy implementation
Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.
Published: 2021-01-21T17:09:21.689Z
Updated: 2024-09-16T22:01:55.884Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.