| Package | Affected versions | Patched versions |
|---|---|---|
| io.fabric8:kubernetes-client | ≥ 5.0.0-beta-1, < 5.0.3≥ 5.1.0, < 5.1.2≥ 5.11.0, < 5.11.2≥ 5.2.0, < 5.3.2≥ 5.5.0, < 5.7.4≥ 5.8.0, < 5.8.1≥ 5.9.0, < 5.10.2 | 5.0.35.1.25.11.25.3.25.7.45.8.15.10.2 |
| a-mq streams | = 2.0.1 | |
| build of quarkus | = 2.2.5 | |
| descision manager | = 7.0 | |
| fabric8-kubernetes | = 5.0.0= 5.8.0≥ 5.0.1, < 5.0.3≥ 5.1.0, < 5.1.2≥ 5.11.0, < 5.11.2≥ 5.2.0, < 5.3.2≥ 5.5.0, < 5.7.4≥ 5.9.0, < 5.10.2 | 5.0.35.1.25.11.25.3.25.7.45.10.2 |
| fuse | = 7.11 | |
| integration camel quarkus | = 2.2.1 | |
| process automation | = 7.0 |
fabric8 Kubernetes client had an arbitrary code execution flaw in versions 5.0.0-beta-1 and higher. Attackers could potentially insert malicious YAMLs due to misconfigured YAML parsing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free