CVE-2021-20218
1 advisory.
Maven/io.fabric8:kubernetes-client CVE-2021-20218: high 7.4, EPSS 1.31%
Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client
Action: Upgrade io.fabric8:kubernetes-client to 4.7.2 (4.7.x), 4.11.2 (4.11.x), 4.13.2 (4.13.x) or 5.0.2 (5.0.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2.0 | 4.7.2 | - |
| 4.8.0 | 4.11.2 | - |
| 4.12.0 | 4.13.2 | - |
| 5.0.0 | 5.0.2 | - |
Fixed versions
| 4.7.2 | 4.11.2 | 4.13.2 | 5.0.2 |
Sources
- osv: GHSA-jwh2-ffg4-48xc
- https://nvd.nist.gov/vuln/detail/CVE-2021-20218
- https://github.com/fabric8io/kubernetes-client/issues/2715
- https://bugzilla.redhat.com/show_bug.cgi?id=1923405
CVE-2021-20218 · published · modified · JSON