VulnerableCode Package Details - pkg:maven/io.fabric8/kubernetes-client@4.13.1

Search for packages

Vulnerability	Summary	Fixed by
VCID-y4mj-2jec-j3gg Aliases: CVE-2021-20218 GHSA-jwh2-ffg4-48xc	Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2	4.13.2 Affected by 0 other vulnerabilities. 5.0.2 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-y4mj-2jec-j3gg
Aliases:
CVE-2021-20218
GHSA-jwh2-ffg4-48xc

Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2

4.13.2
Affected by 0 other vulnerabilities.

5.0.2
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-16T21:18:57.039793+00:00	GitLab Importer	Affected by	VCID-y4mj-2jec-j3gg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.fabric8/kubernetes-client/CVE-2021-20218.yml	38.4.0
2026-04-11T22:31:13.911838+00:00	GitLab Importer	Affected by	VCID-y4mj-2jec-j3gg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.fabric8/kubernetes-client/CVE-2021-20218.yml	38.3.0
2026-04-02T22:42:36.806866+00:00	GitLab Importer	Affected by	VCID-y4mj-2jec-j3gg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.fabric8/kubernetes-client/CVE-2021-20218.yml	38.1.0
2026-04-01T17:00:18.103724+00:00	GitLab Importer	Affected by	VCID-y4mj-2jec-j3gg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.fabric8/kubernetes-client/CVE-2021-20218.yml	38.0.0
2026-04-01T16:02:05.185668+00:00	GHSA Importer	Affected by	VCID-y4mj-2jec-j3gg	https://github.com/advisories/GHSA-jwh2-ffg4-48xc	38.0.0