Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/kubeclient@4.9.3
purl pkg:gem/kubeclient@4.9.3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-puxh-g4cw-affj Improper Certificate Validation A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM). CVE-2022-0759
GHSA-69p3-xp37-f692

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T21:21:20.124924+00:00 GHSA Importer Fixing VCID-puxh-g4cw-affj https://github.com/advisories/GHSA-69p3-xp37-f692 38.6.0
2026-06-04T17:52:13.660194+00:00 GithubOSV Importer Fixing VCID-puxh-g4cw-affj https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/03/GHSA-69p3-xp37-f692/GHSA-69p3-xp37-f692.json 38.6.0
2026-06-02T04:41:53.448127+00:00 GitLab Importer Fixing VCID-puxh-g4cw-affj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/kubeclient/CVE-2022-0759.yml 38.6.0