kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

Kubernetes Java Client Java client for the kubernetes API. Client versioning The Java client uses Semantic Versioning. We increment the major version number whenever we regenerate the client for a new Kubernetes release version see table below. Whenever we do this there are new APIs added and...

cn.dustlight.fun:fun-kubeless (>=0.0.2-alpha-1, <=0.0.3-alpha-1), cn.dustlight.jobless:jobless-kubernetes (>=0.0.1-alpha, <=0.0.2-alpha) +61 more potentially affected by CVE-2020-8570 via io.kubernetes:client-java (10.0.0)

io.kubernetes:client-java MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - cn.dustlight.fun:fun-kubeless =0.0.2-alpha-1, =0.0.1-alpha, =4.0.5, =0.0.3, =2.3.0, =2.4.0 -...

io.kubernetes:client-java-examples (1.0.0-beta1) potentially affected by CVE-2020-8570 via io.kubernetes:client-java (1.0.0-beta1)

io.kubernetes:client-java MAVEN version 1.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 1.0.0-beta1 Source cves: CVE-2020-8570 Source advisory:...

com.squareup.misk:chat (>=0.2.3, <=0.2.5), com.squareup.misk:exemplar (>=0.2.3, <=0.2.5) +4 more potentially affected by CVE-2020-8570 via io.kubernetes:client-java (0.2)

io.kubernetes:client-java MAVEN version 0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - com.squareup.misk:chat =0.2.3, =0.2.3, =0.2.3, =0.2.3, =0.2.5 - com.squareup.misk:urlshortener 0.2.5 -...

app.cash.backfila:client-misk (>=0.1.0, <=0.1.4-20221128.2102-bdd85b6), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +64 more potentially affected by CVE-2020-8570 via io.kubernetes:client-java (1.0.0)

io.kubernetes:client-java MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - app.cash.backfila:client-misk =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc,...

com.github.javaito:hcjf (>=javaito, <=2.2.36), com.instaclustr:commons (>=1.1.0, <=1.5.0) +12 more potentially affected by CVE-2020-8570 via io.kubernetes:client-java (6.0.1)

io.kubernetes:client-java MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - com.github.javaito:hcjf =javaito, =1.1.0, =1.1.0, =1.0.3, =1.0.3, =6.1.1, =6.6.0 -...

com.github.jeanbaptistewatenberg.junit5kubernetes:core (>=1.0.0, <=2.0.0), com.github.jeanbaptistewatenberg.junit5kubernetes:jdbc (2.0.0) +17 more potentially affected by CVE-2020-8570 via io.kubernetes:client-java (8.0.0)

io.kubernetes:client-java MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - com.github.jeanbaptistewatenberg.junit5kubernetes:core =1.0.0, =0.0.40, =1.0.9, =0.8.0, =8.1.0, =8.1.0, =8.1....

com.bybutter.sisyphus.middleware:sisyphus-grpc-client-kubernetes (>=0.0.4, <=0.0.5), com.cloudimpl:cluster-k8 (2.1.0.9) +13 more potentially affected by CVE-2020-8570 via io.kubernetes:client-java (8.0.2)

io.kubernetes:client-java MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - com.bybutter.sisyphus.middleware:sisyphus-grpc-client-kubernetes =0.0.4, =2.1.0, =2.3.0-beta, =2.1.0, =2.1.0,...

club.mydlq:swagger-kubernetes (2.1.0), com.github.javaito:hcjf (>=1.7.0, <=1.10.0) +11 more potentially affected by CVE-2020-8570 via io.kubernetes:client-java (4.0.0)

io.kubernetes:client-java MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - club.mydlq:swagger-kubernetes 2.1.0 - com.github.javaito:hcjf =1.7.0, =6.2.0, =6.6.0, =6.2.0, =6.2.0, =6.6.0,...

com.github.javaito:hcjf (>=1.10.1, <=1.11.5), com.github.shoothzj:sdk-kubectl (>=3.0.10.release, <=3.0.31.release) +18 more potentially affected by CVE-2020-8570 via io.kubernetes:client-java (5.0.0)

io.kubernetes:client-java MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - com.github.javaito:hcjf =1.10.1, =3.0.10.release, =3.0.10.release, =1.0.0, =1.0.0, =0.0.1, =8.17.1, =8.17.1,...

CVE-2020-8570

creationtimestamp| type| source ---|---|--- 2021-01-21 20:28:24+00:00| seen| https://t.me/cibsecurity/22505 2021-03-05 05:52:31+00:00| seen| https://t.me/k8security/223...

CVE-2020-8570

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process...

CVE-2020-8570

CVE-2020-8570: Kubernetes Java client libraries suffer a path traversal issue in the Copy implementation. Versions 10.0.0 and prior to 9.0.1 allow writes to paths outside the current directory when extracting multiple files from a malicious archive sent from a remote pod, potentially overwriting ...

CVE-2020-8570 Kubernetes Java client libraries unvalidated path traversal in Copy implementation

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process...

cn.dustlight.fun:fun-kubeless (>=0.0.2-alpha-1, <=0.0.3-alpha-1), cn.dustlight.jobless:jobless-kubernetes (>=0.0.1-alpha, <=0.0.2-alpha) +61 more potentially affected by CVE-2020-8570 via io.kubernetes:client-java (10.0.0)

io.kubernetes:client-java MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - cn.dustlight.fun:fun-kubeless =0.0.2-alpha-1, =0.0.1-alpha, =4.0.5, =0.0.3, =2.3.0, =2.4.0 -...