kubernetes-client/java
GitHub
Releases79
Frequency1 month 1 week
Last Release
Stars3.99K
Official Java client library for kubernetes
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| — | — | — | ||
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false. | ||||
| >= 10.0.0, <= 10.0.1, <= 9.0.2, >= 11.0.0, < 11.0.1 | 6.7 MEDIUM | 4.6 MEDIUM | ||
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution. | ||||
| < 9.0.2, >= 10.0.0, < 10.0.1 | 9.1 CRITICAL | 6.4 MEDIUM | ||
Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code. | ||||