io.kubernetes:client-java (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package io.kubernetes:client-java, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2020-8570 — CVSS 9.1 (critical): Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when…
• CVE-2021-25738 — CVSS 6.7 (medium): Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.