Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-25736 — MEDIUM severity vulnerability | Release Alert

CVE-2021-25736

5.8

MEDIUMCVSS v3

Published

October 30, 2023

Affected

7 projects

Assigned by

[email protected]

Severity scale

010

Description

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress[].ip” field. Clusters where the LoadBalancer controller sets the “status.loadBalancer.ingress[].ip” field are unaffected.

kubernetes/kubernetes

GitHubProduction-Grade Container Scheduling and Management

>= 1.18.0, < 1.18.18, >= 1.19.0, < 1.19.10, >= 1.20.0, < 1.20.6NVD

openshift/kubernetes

GitHubThis is the repo that tracks all patches to the OpenShift distribution of Kubernetes on branches corresponding to OpenShift releases. See https://github.com/openshift/kubernetes/blob/master/README.openshift.md for more

>= 1.18.0, < 1.18.18, >= 1.19.0, < 1.19.10, >= 1.20.0, < 1.20.6NVD

More on this CVE

NVD↗GitHub Advisory↗

Python Package IndexKubernetes python client

>= 1.18.0, < 1.18.18, >= 1.19.0, < 1.19.10, >= 1.20.0, < 1.20.6NVD

Crates.ioA Kubernetes client library for Rust

>= 1.18.0, < 1.18.18, >= 1.19.0, < 1.19.10, >= 1.20.0, < 1.20.6NVD

NPMInstall Kubernetes from npm

>= 1.18.0, < 1.18.18, >= 1.19.0, < 1.19.10, >= 1.20.0, < 1.20.6NVD

RubyGemsCurrently a placeholder. In the future, a Gem to get up to speed with Kubernetes. For more info: https://github.com/GoogleCloudPlatform/kubernetes/

>= 1.18.0, < 1.18.18, >= 1.19.0, < 1.19.10, >= 1.20.0, < 1.20.6NVD

kubernetes/kubernetes

GitLab

>= 1.18.0, < 1.18.18, >= 1.19.0, < 1.19.10, >= 1.20.0, < 1.20.6NVD