Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/io.kubernetes/client-java@8.0.0
Typemaven
Namespaceio.kubernetes
Nameclient-java
Version8.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version11.0.1
Latest_non_vulnerable_version11.0.1
Affected_by_vulnerabilities
0
url VCID-53j4-wdua-y7dv
vulnerability_id VCID-53j4-wdua-y7dv
summary 
Path Traversal
Kubernetes Java client libraries allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8570.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8570.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8570
reference_id
reference_type
scores
0
value 0.01085
scoring_system epss
scoring_elements 0.78253
published_at 2026-06-05T12:55:00Z
1
value 0.01085
scoring_system epss
scoring_elements 0.78227
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8570
2
reference_url https://github.com/kubernetes-client/java
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/kubernetes-client/java
3
reference_url https://github.com/kubernetes-client/java/commit/858316ae8bc1145005a0310e1f65f95d2389a589
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/kubernetes-client/java/commit/858316ae8bc1145005a0310e1f65f95d2389a589
4
reference_url https://github.com/kubernetes-client/java/issues/1491
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/kubernetes-client/java/issues/1491
5
reference_url https://github.com/kubernetes-client/java/pull/1450
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/kubernetes-client/java/pull/1450
6
reference_url https://groups.google.com/g/kubernetes-security-announce/c/sd5h73sFPrg
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://groups.google.com/g/kubernetes-security-announce/c/sd5h73sFPrg
7
reference_url https://lists.apache.org/thread.html/r0c76b3d0be348f788cd947054141de0229af00c540564711e828fd40@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r0c76b3d0be348f788cd947054141de0229af00c540564711e828fd40@%3Ccommits.druid.apache.org%3E
8
reference_url https://lists.apache.org/thread.html/r1975078e44d96f2a199aa90aa874b57a202eaf7f25f2fde6d1c44942@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1975078e44d96f2a199aa90aa874b57a202eaf7f25f2fde6d1c44942@%3Ccommits.druid.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/rcafa485d63550657f068775801aeb706b7a07140a8ebbdef822b3bb3@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rcafa485d63550657f068775801aeb706b7a07140a8ebbdef822b3bb3@%3Ccommits.druid.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/rdb223e1b82e3d7d8e4eaddce8dd1ab87252e3935cc41c859f49767b6@%3Ccommits.druid.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rdb223e1b82e3d7d8e4eaddce8dd1ab87252e3935cc41c859f49767b6@%3Ccommits.druid.apache.org%3E
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1915464
reference_id 1915464
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1915464
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8570
reference_id CVE-2020-8570
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-8570
fixed_packages
0
url pkg:maven/io.kubernetes/client-java@9.0.2
purl pkg:maven/io.kubernetes/client-java@9.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6mpy-82ss-ubbg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.kubernetes/client-java@9.0.2
1
url pkg:maven/io.kubernetes/client-java@10.0.1
purl pkg:maven/io.kubernetes/client-java@10.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6mpy-82ss-ubbg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.kubernetes/client-java@10.0.1
aliases CVE-2020-8570, GHSA-cghx-9gcr-r42x
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-53j4-wdua-y7dv
1
url VCID-6mpy-82ss-ubbg
vulnerability_id VCID-6mpy-82ss-ubbg
summary 
Improper Input Validation
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25738.json
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25738.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25738
reference_id
reference_type
scores
0
value 0.00116
scoring_system epss
scoring_elements 0.30007
published_at 2026-06-05T12:55:00Z
1
value 0.00116
scoring_system epss
scoring_elements 0.29937
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25738
2
reference_url https://github.com/kubernetes-client/java
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/kubernetes-client/java
3
reference_url https://github.com/kubernetes-client/java/issues/1698
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/kubernetes-client/java/issues/1698
4
reference_url https://groups.google.com/g/kubernetes-security-announce/c/K_pOK2WbAJk
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/g/kubernetes-security-announce/c/K_pOK2WbAJk
5
reference_url http://www.openwall.com/lists/oss-security/2022/08/23/2
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2022/08/23/2
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1961365
reference_id 1961365
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1961365
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-25738
reference_id CVE-2021-25738
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-25738
fixed_packages
0
url pkg:maven/io.kubernetes/client-java@10.0.2
purl pkg:maven/io.kubernetes/client-java@10.0.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.kubernetes/client-java@10.0.2
1
url pkg:maven/io.kubernetes/client-java@9.0.3
purl pkg:maven/io.kubernetes/client-java@9.0.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.kubernetes/client-java@9.0.3
2
url pkg:maven/io.kubernetes/client-java@11.0.1
purl pkg:maven/io.kubernetes/client-java@11.0.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.kubernetes/client-java@11.0.1
aliases CVE-2021-25738, GHSA-m8wh-mqgf-rr8g
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6mpy-82ss-ubbg
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/io.kubernetes/client-java@8.0.0