Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-25737 — LOW severity vulnerability | Release Alert

CVE-2021-25737

2.7

LOWCVSS v3

Published

September 6, 2021

CVSS v2

4.9 MEDIUM

Affected

7 projects

Assigned by

[email protected]

Severity scale

010

Description

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

kubernetes/kubernetes

GitHubProduction-Grade Container Scheduling and Management

>= 1.19.0, < 1.19.10, >= 1.16.0, < 1.18.19, >= 1.20.0, < 1.20.7, = 1.21.0NVD

openshift/kubernetes

GitHubThis is the repo that tracks all patches to the OpenShift distribution of Kubernetes on branches corresponding to OpenShift releases. See https://github.com/openshift/kubernetes/blob/master/README.openshift.md for more

>= 1.19.0, < 1.19.10, >= 1.16.0, < 1.18.19, >= 1.20.0, < 1.20.7, = 1.21.0NVD

More on this CVE

NVD↗GitHub Advisory↗

Python Package IndexKubernetes python client

>= 1.19.0, < 1.19.10, >= 1.16.0, < 1.18.19, >= 1.20.0, < 1.20.7, = 1.21.0NVD

Crates.ioA Kubernetes client library for Rust

>= 1.19.0, < 1.19.10, >= 1.16.0, < 1.18.19, >= 1.20.0, < 1.20.7, = 1.21.0NVD

NPMInstall Kubernetes from npm

>= 1.19.0, < 1.19.10, >= 1.16.0, < 1.18.19, >= 1.20.0, < 1.20.7, = 1.21.0NVD

RubyGemsCurrently a placeholder. In the future, a Gem to get up to speed with Kubernetes. For more info: https://github.com/GoogleCloudPlatform/kubernetes/

>= 1.19.0, < 1.19.10, >= 1.16.0, < 1.18.19, >= 1.20.0, < 1.20.7, = 1.21.0NVD

kubernetes/kubernetes

GitLab

>= 1.19.0, < 1.19.10, >= 1.16.0, < 1.18.19, >= 1.20.0, < 1.20.7, = 1.21.0NVD