Search for packages
| purl | pkg:maven/io.fabric8/kubernetes-client@5.0.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-wj5y-g7z1-9qam
Aliases: CVE-2021-4178 GHSA-98g7-rxmf-rrxm GMS-2022-2960 |
fabric8 kubernetes-client vulnerable fabric8 Kubernetes client had an arbitrary code execution flaw in versions 5.0.0-beta-1 and higher. Attackers could potentially insert malicious YAMLs due to misconfigured YAML parsing. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-y4mj-2jec-j3gg
Aliases: CVE-2021-20218 GHSA-jwh2-ffg4-48xc |
Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2 |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||