Code injection in Kubernetes Java Client

MEDIO 6.7CVE-2021-25738 · GHSA-m8wh-mqgf-rr8g · Published 11/10/2021 · updated 17/06/2026

En resumen

CVE-2021-25738 es una vulnerabilidad MEDIO (CVSS 6.7) que afecta a io.kubernetes:client-java, java (kubernetes).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.47%, mayor que el 40.9% de las vulnerabilidades.
Solución: actualizar a 11.0.1 o posterior.

Package	Affected versions	Patched versions
io.kubernetes:client-java Maven	`< 11.0.1`	`11.0.1`
java kubernetes	`≥ 10.0.0, ≤ 10.0.1≥ 11.0.0, < 11.0.1≤ 9.0.2`	`11.0.1`

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.

NVD description

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.