kubernetes-client/java

kubernetes-client/java

Releases77

Frequency1 month 1 week

Last Release 2 months ago

Stars3.98K

Official Java client library for kubernetes

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-25738 ↗	Oct 11, 2021Monday, 11 October 2021, 19:15	6.7 MEDIUM	4.6 MEDIUM
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
CVE-2020-8570 ↗	Jan 21, 2021Thursday, 21 January 2021, 17:15	9.1 CRITICAL	6.4 MEDIUM
Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.