Code injection in Kubernetes Java Client

MÉDIO 6.7CVE-2021-25738 · GHSA-m8wh-mqgf-rr8g · Published 11/10/2021 · updated 17/06/2026

Em resumo

CVE-2021-25738 é uma vulnerabilidade MÉDIO (CVSS 6.7) que afeta io.kubernetes:client-java, java (kubernetes).
Chance de exploração nos próximos 30 dias (EPSS): 0.47%, maior que 40.9% das vulnerabilidades.
Correção: atualize para 11.0.1 ou posterior.

Package	Affected versions	Patched versions
io.kubernetes:client-java Maven	`< 11.0.1`	`11.0.1`
java kubernetes	`≥ 10.0.0, ≤ 10.0.1≥ 11.0.0, < 11.0.1≤ 9.0.2`	`11.0.1`

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.

NVD description

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.